home-hyperliquide-exchnge[.]pages[.]dev

PhishDestroy identifies home-hyperliquide-exchnge.pages.dev as an active brand impersonation domain targeting Hyperliquid users. This site is designed to trick visitors into connecting cryptocurrency wallets under the false pretense of a legitimate Hyperliquid trading interface. Once connected, the drainer silently siphons funds to attacker-controlled addresses without explicit user approval. Cloudflare’s Pages service hosts this malicious page, which leverages Google Trust Services’ SSL certificate to appear legitimate and evade immediate suspicion. This domain was flagged with a VirusTotal detection ratio of 4/95 engines as of the latest scan, indicating it currently evades most antivirus and security tools. The domain was registered through Cloudflare, Inc., resolving to IP address 188.114.97.3. While the exact creation date is not publicly disclosed, the use of Cloudflare Pages suggests a recent deployment aimed at capitalizing on Hyperliquid’s growing user base. If you accessed this domain, disconnect your wallet immediately using your wallet’s emergency disconnect feature. Revoke any unauthorized permissions in your wallet settings and transfer remaining assets to a new, secure wallet. Report the incident to Hyperliquid’s official support channels and consider using blockchain explorers to track suspicious transactions. Do not interact further with this domain or any linked accounts to prevent further losses.