exchange-hyperliquid-cdn-us[.]pages[.]dev

PhishDestroy identifies exchange-hyperliquid-cdn-us.pages.dev as an active brand impersonation domain targeting Hyperliquid users. This fraudulent site is currently under investigation and remains accessible, posing potential risks to cryptocurrency traders who may mistake it for the legitimate Hyperliquid exchange platform.

This domain impersonates Hyperliquid and was flagged by 3 of 95 VirusTotal vendors as of the latest scan. It resolves to IP address 172.66.47.18, is registered through Cloudflare, Inc., and operates under a Google Trust Services SSL certificate. The domain’s infrastructure leverages Cloudflare Pages, a legitimate service, to host the impersonation content, complicating detection efforts. While no blocklist detections have been recorded yet, the absence of VirusTotal flags does not guarantee safety, as threat actors frequently exploit legitimate services to evade detection.

Users are strongly advised to avoid interacting with exchange-hyperliquid-cdn-us.pages.dev or any related domains claiming affiliation with Hyperliquid. To verify legitimacy, always cross-check URLs against the official Hyperliquid website (hyperliquid.xyz) and use bookmarked links or trusted sources. Enable multi-factor authentication (MFA) on all cryptocurrency accounts and monitor transactions for unauthorized activity. Report suspicious domains to Hyperliquid’s official support channels and your cybersecurity team. Exercise caution with unsolicited links or advertisements promoting Hyperliquid alternatives, as these may lead to similar impersonation traps.