vro1zc360[.]pages[.]dev

The domain vro1zc360.pages.dev presents a significant brand impersonation threat, targeting Hyperliquid users. The site is actively engaging visitors with deceptive content under the guise of offering a 'Hyperliquid Airdrop,' which is likely aimed at tricking users into divulging sensitive information or credentials. This type of phishing attack can lead to unauthorized access to personal or financial data, posing serious security risks to victims.

This domain was registered through Cloudflare Pages on December 09, 2025, and resolves to the IP address 188.114.96.3. It is currently flagged by 2 out of 95 security vendors on VirusTotal, highlighting its potential threat to users. Additionally, the domain appears on three security blocklists, specifically blocked by services such as PhishDestroy, MetaMask, and SEAL. The presence on multiple blocklists underscores the malicious nature of this domain.

Users who have visited vro1zc360.pages.dev should immediately conduct a thorough review of their accounts, especially those related to Hyperliquid. It is advisable to change passwords and monitor account activity for any unauthorized transactions. Users should also ensure that their antivirus and anti-phishing tools are updated to prevent further exposure to similar threats. Always verify the legitimacy of sites claiming to be associated with known brands before providing any personal information.