hyper-liquid-eng[.]pages[.]dev

A recently flagged domain, hyper-liquid-eng.pages.dev, has been observed posing as Hyperliquid in a suspected brand impersonation scheme. Threat intelligence indicates this page is actively leveraging the Hyperliquid brand to deceive users into divulging sensitive information or downloading malicious payloads. The domain’s registration details and low detection rate suggest it may still be in early operational stages, but should not be underestimated. PhishDestroy identifies this domain as part of a low-profile but dangerous impersonation campaign. According to VirusTotal, hyper-liquid-eng.pages.dev currently shows 0 detections out of 95 scanning engines, indicating it has not yet been widely blacklisted. The site leverages a Google Trust Services SSL certificate and resolves to IP 172.66.47.129 via Cloudflare, Inc., making it appear legitimate at first glance. This tactic is commonly used by adversaries to build trust before deploying phishing lures or malware. If you have visited hyper-liquid-eng.pages.dev or entered any information, cease all interaction with the site immediately. Disconnect from the network and run a full antivirus scan. If credentials were provided, change passwords on all related accounts, especially those tied to financial or crypto platforms like Hyperliquid. Report the domain to your IT team or cybersecurity provider with the seed e7ee8d for further investigation.