get-started-hyperliquid-wallet[.]pages[.]dev

The domain get-started-hyperliquid-wallet.pages.dev is currently active and impersonates the brand Hyperliquid. It is classified as a brand impersonation threat, which poses a risk of misleading users and potentially leading to financial or personal data loss.

Analysis indicates that the domain was created on April 06, 2026, and is registered through Cloudflare, Inc. The domain resolves to the IP address 188.114.97.3, which is located in California, USA. Despite being flagged by one security blocklist, the domain has not yet been detected by any of the 95 vendors on VirusTotal. The SSL certificate is issued by Google Trust Services, providing a false sense of security. The page title, 'Everything You Need to Know About the Hyperliquid Wallet in 2025,' further reinforces the impersonation, as it mimics legitimate content related to the Hyperliquid brand. This domain's creation and operational status suggest it is part of a recent and ongoing campaign.

The current status of the domain is active, and it remains a potential threat to users who may be misled by the impersonation. To mitigate this risk, it is recommended that organizations and individuals avoid interacting with this domain and report it to their respective security teams. Additionally, network administrators should consider implementing DNS filtering rules to block access to this domain. Regular monitoring of related domains and IP addresses is advised to detect and respond to any further malicious activities.