hyperswap-v3[.]pages[.]dev

This domain, hyperswap-v3.pages.dev, is currently active and was registered on February 21, 2026 through Cloudflare, Inc. DNS resolution points to the IP address 172.66.45.6, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The site serves content over HTTPS using a certificate issued by Google Trust Services under the WE1 root, and the HTTP response includes HSTS and HTTP/3 headers, indicating a modern TLS configuration. The page title observed in the initial request is “Hyperswap v3 — trade volume and market listings | CoinMarketCap,” which suggests an attempt to impersonate the CoinMarketCap brand. The Gridinsoft trust score is 0 out of 100, and VirusTotal reports a single security vendor detection among 93 scanners. The domain is listed on a single security blocklist and has been blocked by PhishDestroy. The infrastructure uses Cloudflare’s default nameservers wally.ns.cloudflare.com and lewis.ns.cloudflare.com. No additional payload, script, or credential‑harvesting behavior has been observed, and the exact content beyond the title remains unverified. Defenders should treat the domain as high‑risk brand‑impersonation activity: block DNS resolution and HTTP traffic, add the IP and domain to intrusion‑prevention and web‑filtering policies, and monitor for any related C2 activity or credential‑phishing attempts targeting users of CoinMarketCap. Continuous re‑assessment is recommended as new intelligence becomes available.