Is get-hyperliquid-wallet.pages.dev a scam?

Our automated security review flags get-hyperliquid-wallet.pages.dev as dangerous. Multiple threat indicators were detected — treat the site as a scam until proven otherwise.

Is get-hyperliquid-wallet.pages.dev safe to use?

No — get-hyperliquid-wallet.pages.dev scored 1/100 on our trust scale. We detected active threat indicators, so we recommend avoiding the site entirely.

Does get-hyperliquid-wallet.pages.dev have a valid SSL certificate?

Yes. get-hyperliquid-wallet.pages.dev presents a valid TLSv1.3 certificate issued by Google Trust Services · WE1, expiring in 58 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.

How old is the get-hyperliquid-wallet.pages.dev domain?

get-hyperliquid-wallet.pages.dev is 0 days old. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.

Has get-hyperliquid-wallet.pages.dev been flagged by antivirus engines?

2 out of 91 antivirus engines in our malware network flagged get-hyperliquid-wallet.pages.dev as malicious or suspicious (2 outright malicious). Even one detection is a meaningful signal.

Is get-hyperliquid-wallet.pages.dev on any phishing or malware blacklists?

No. get-hyperliquid-wallet.pages.dev is not currently listed on the major browser blocklist feeds that modern browsers use.

Where is get-hyperliquid-wallet.pages.dev hosted?

get-hyperliquid-wallet.pages.dev resolves to an IP operated by Cloudflare, Inc. in US (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.

How often is the get-hyperliquid-wallet.pages.dev report updated?

We cache results for 24 hours. Signed-in MalwareTips members can trigger a manual rescan at any time using the "Rescan" button on the report page, which re-runs every check from scratch and refreshes this page.

DANGEROUS

Crypto scam / wallet-drainer

Domain was registered only 0 days ago — brand-new sites are higher-risk by default. Signals match fake investment platforms and wallet drainers. Never connect a wallet, paste a seed phrase, or deposit crypto here.

Security Review

Is get-hyperliquid-wallet.pages.dev legit or a scam?

Name: Is get-hyperliquid-wallet.pages.dev legit or a scam?
Item: get-hyperliquid-wallet.pages.dev
Rating: 1
Author: MalwareTips

Our verdict:Dangerous· 1/100

SafeSuspiciousDangerous

Clone of Hyperliquid wallet guide on a brand-new 0-day domain flagged as phishing by Fortinet and carrying scam reports.

Top reasons

Domain created only 0 days ago with no business registration.Confirmed clone of official app.hyperliquid.xyz using unofficial Cloudflare Pages hosting.Fortinet flagged the page as phishing and ADMINUSLabs marked it malicious.

get-hyperliquid-wallet.pages.devScanned 10d ago

Post Facebook

Trust score

DANGEROUS

Heuristics 0·MT 15

Category tags

cryptoclone#Clone Site#Crypto Fraud#Phishing90% MT confidence

Technical red flags (3)

2 of 91 engines flagged Domain is 0 days old Scam-network signals (85/100)

Positive signals (3)

Not on major blacklists Encrypted connection Clean server reputation

These checks passed — but they don't clear the site. A clean antivirus result, valid SSL, and a calm server only mean it isn't hosting malware; they say nothing about whether the business is real. This verdict is based on the site's conduct and content, not a malware detection.

Wallet-drainer patterns detected

This page uses language and API references consistent with modern crypto wallet-drainer kits. If you connected your wallet or signed a transaction on this site, assume your wallet is compromised — revoke approvals, move funds to a fresh wallet with a new seed phrase, and treat the original as burned.

·Page asks for a wallet seed phrase / recovery phrase — legitimate wallets never do this.

Revoke token approvals File FBI IC3 report

View density

Analysis Summary

Threat Intelligence

0/91

Engines flagged this URL

Domain Age

0 days old

Registration date unknown

MT Intelligence

Dangerous

High likelihood · 90% confidence

MT Intelligence

Advanced threat intelligence

MT Security Analyst

High scam likelihoodengineMT · Guardiantrust15/100

MT AgentLive web researchVisual inspectionNetwork correlation

Confidence

The page presents itself as a beginner's guide to Hyperliquid Wallet but is hosted on a Cloudflare Pages subdomain that is only 0 days old. Our antivirus network detected it as malicious with Fortinet specifically labeling it phishing. The site is confirmed as a clone of the official app.hyperliquid.xyz with no contact details or business registration. Multiple scam reports exist for this exact domain and similar hyperliquid-themed .pages.dev clones. These signals together indicate a high-risk impersonation attempt rather than a legitimate resource.

Full dossier

Analysis complete

Page Content

The page displays a long-form article titled as a Hyperliquid Wallet beginner's guide with sections on features and security. It loads external content from hyperliquid.xyz but contains zero contact information, emails, or phone numbers.

Infrastructure

Hosted on IP 172.66.47.82 with valid SSL from Google Trust Services. The domain is 0 days old and shows 23 abuse reports on the hosting IP.

Domain History

Zero WHOIS age with no business registration records. The subdomain pattern on .pages.dev matches known clusters of brand-impersonation domains.

Web Reputation

Two scam reports reference this domain directly alongside other hyperliquid-themed clones. No positive reviews or trust signals were located.

Risk Factors

Domain created only 0 days ago with no business registration.
Confirmed clone of official app.hyperliquid.xyz using unofficial Cloudflare Pages hosting.
Fortinet flagged the page as phishing and ADMINUSLabs marked it malicious.
IP carries 23 abuse reports and the site has no contact details whatsoever.
Multiple scam reports list this domain in hyperliquid impersonation clusters.

Positive Signals

Page renders as a clean informational article with professional layout.
No login forms or countdown timers detected on the page.

AI Recommendation

Do not visit the site or enter any wallet details. Use only the official Hyperliquid domain at app.hyperliquid.xyz.

Scam network detected

1 linked domain correlated

Evidence confirms this site is a clone of app.hyperliquid.xyz with zero contact info and a 0-day domain.

app.hyperliquid.xyz

Next-gen fraud intelligence

Evidence-backedCross-checked

Website Preview

LIVE RENDER

get-hyperliquid-wallet.pages.dev

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site.

Visual Screenshot Analysis

We capture a fresh screenshot of the live page and ask a vision model to look for scam visual patterns — fake trust badges, countdown timers, overlay pop-ups, and visual clones of legitimate brands.

/ 100

No visual red flags

No scam visual patterns detected

The screenshot shows a clean, fully rendered informational article with professional layout and no visible scam indicators or suspicious elements.

Visual risk0/100

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for get-hyperliquid-wallet.pages.dev, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Domain age

0 days

Brand-new domains are higher-risk by default.

Business registration

No public record found

Could not match the site to a registered company — common for small sites.

Clone check

Clones app.hyperliquid.xyz

The page impersonates a well-known brand's site.

Typosquat check

No look-alike match

The domain doesn't resemble any well-known brand's spelling.

Web mentions

2 scam reports

Key findings

6 headline facts from open-web research

- Domain get-hyperliquid-wallet.pages.dev is 0 days old and hosted on Cloudflare Pages (IP 172.66.44.174, ASN CLOUDFLARENET)
- Page title: 'Hyperliquid Wallet Beginner’s Guide: Step-by-Step Introduction to the Fastest On-Chain Wallet in Crypto'
- Official Hyperliquid platform uses app.hyperliquid.xyz and hyperliquid.xyz; no official presence on .pages.dev
- Similar domains (e.g., hyper-liquid-wallet-us.pages.dev, get-started-hyperliquid-wallet.pages.dev, started-hyper-liquid-us.pages.dev) appear in phishdestroy.io reports on brand impersonation clusters
- urlquery.net has an active scan report for the exact domain
- Multiple phishdestroy.io entries list this domain alongside other hyperliquid-themed .pages.dev sites flagged as suspicious

Scam reports (2)

Direct quotes from public scam databases, forums, and news.

phishdestroy.ioopen
"get-hyperliquid-wallet.pages.dev . Alive · hyperliqid-xyz-en-us.pages.dev. Alive · hyperliquid-20e.pages.dev. Alive · hypercoretrade.pages.dev. Alive."
urlquery.netopen
"Report - get-hyperliquid-wallet.pages.dev"

Impersonation / typosquat

Clone of app.hyperliquid.xyz

Mimics official Hyperliquid branding and content as a 'beginner’s guide' on unofficial Cloudflare Pages subdomain; cluster of similar .pages.dev domains flagged as brand impersonation

Research summary

Narrative write-up from our AI analyst, grounded on the facts above

phishdestroy.io lists get-hyperliquid-wallet.pages.dev alongside other hyperliquid-themed .pages.dev domains flagged for brand impersonation. urlquery.net maintains an active scan report for the exact domain showing the same suspicious pattern.

Scam Network Intelligence

Cross-site correlation

This site shares signals with a broader cluster

Critical cluster

Many scams don't operate alone. We correlate third-party scripts, hosting infrastructure, brand-impersonation signals, and the AI evidence package to detect when a site is part of a broader scam network.

Suspicion score

0/100

ClearLowModerateHighCritical

Evidence (4)

IP 172.66.47.82 has 23 abuse reports — likely part of a network.
Evidence confirms this site is a clone of app.hyperliquid.xyz.
Zero contact info, crypto/gambling content, and the domain is only 0 days old — hallmark of a drainer farm.
Domain is only 0 days old and already carries multiple network-level red flags.

Linked signals (2)

Clone of app.hyperliquid.xyzPattern · Contactless Crypto NEW Domain

Antivirus Engines

Detection matrix · live

2 engines flagged this URL

We cross-check every URL against our antivirus network of 91 malware and blacklist engines. Each detection is listed below by engine name — even a single hit is a meaningful signal.

2Malicious0Suspicious57Harmless91Engines

of 91

ADMINUSLabs

Malicious· malicious

Fortinet

Malicious· phishing

2 antivirus engines flagged this URL. Even a single detection is a meaningful signal — treat this site with extra caution and avoid entering credentials, payment info, or downloading any files.

Security Scans

Blacklist Check

Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Contact Verification

We fetched the page and looked for real-world contact details. Legitimate businesses almost always publish an email on their own domain, a phone number, and a postal address. Scam shops usually don't.

What We Found

No clear contact details on the page

Emails on site's domainNone

Phone numbersNone

Postal addressNot listed

Linked social profiles0

Signal Summary

Several contact red flags

No contact email found anywhere on the page.
No phone number listed on the page.
No postal address visible on the page.

Domain & Encryption

Domain History

Age0 days old

RegistrarHidden

RegisteredUnknown

ExpiresUnknown

Owner privacyVisible

Encryption Certificate

StatusValid

ProtocolTLSv1.3

IssuerGoogle Trust Services · WE1

ExpiresJul 24, 2026 (58d)

Self-signedNo

Hosting & Technology

HostingCloudflare, Inc.

Server locationUS

Redirect Chain

Hops

Cross-domain

Lookalike

Punycode

1301http://get-hyperliquid-wallet.pages.dev/
2200https://get-hyperliquid-wallet.pages.dev/

Server Reputation

Abuse Intelligence

Confidence score0%

Reports on file23

ISPCloudflare, Inc.

Usage typeContent Delivery Network

Scam-Type Likelihood

4 scam-type patterns detected

Scam-Type Likelihood

0 of 13 categories showed signals

We check every URL against 13 distinct scam categories so the verdict tells you not just how risky the page is, but what kind of risk it carries. Each meter pulls from page signals, web reports, our AI analyst, vision, and the scam-network cluster — not from raw AV labels.

Top match: Crypto Fraud

Crypto Fraud

High likelihood

0/100

AI analyst tagged this as crypto fraud / wallet-drainer.
Page asks for wallet connect or seed-phrase / private key.
AI analyst categorised the site as crypto-themed.

Brand Impersonation

Moderate likelihood

0/100

AI analyst tagged this as a brand / clone-site impersonation.
Clustered with known brand-impersonation infrastructure.

Phishing

Low-level signals

0/100

AI analyst tagged this as phishing.

Job / Task / Survey Scam

Low-level signals

0/100

Referral-program structure detected.

Scam-Type Likelihood

0 of 13 categories showed signals

Top match: Crypto Fraud

Crypto Fraud

High likelihood

0/100

AI analyst tagged this as crypto fraud / wallet-drainer.
Page asks for wallet connect or seed-phrase / private key.
AI analyst categorised the site as crypto-themed.

Brand Impersonation

Moderate likelihood

0/100

AI analyst tagged this as a brand / clone-site impersonation.
Clustered with known brand-impersonation infrastructure.

Phishing

Low-level signals

0/100

AI analyst tagged this as phishing.

Job / Task / Survey Scam

Low-level signals

0/100

Referral-program structure detected.

Crypto scam / wallet-drainer indicators

The page shows patterns common to crypto-investment scams, fake airdrops, and wallet drainers.

Do not interact with get-hyperliquid-wallet.pages.dev
Do not enter credentials, deposit money, download files, or install browser extensions from this site.
Never paste your seed phrase anywhere
Legitimate wallets, exchanges and support staff will never ask for your 12/24-word recovery phrase. Typing it into any website — even one that looks real — gives attackers full access to your funds.
If you already connected a wallet
Revoke token approvals immediately using revoke.cash or Etherscan's Token Approvals tool. Move remaining funds to a fresh wallet (new seed phrase). Assume the original wallet is compromised.
Report the wallet and URL
File a report at IC3 (FBI Internet Crime Complaint Center) or your country's cybercrime portal. Recovery is unlikely, but reports help law enforcement map the network.
Open

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing

Not listedCheck ↗

VirusTotal

ListedCheck ↗

AbuseIPDB

Not listedCheck ↗

Also verify:Spamhaus ↗DNSBL / SURBL ↗PhishTank ↗

Referenced Domains

Outbound domains this page links to or loads resources from. Each links to its own security scan.

hyperliquid.xyz

Safety FAQ

Common questions about this site, answered from the scan data on this page. These are auto-generated — not hand-written — so they always match the underlying report.

Our automated security review flags get-hyperliquid-wallet.pages.dev as dangerous. Multiple threat indicators were detected — treat the site as a scam until proven otherwise.

Final Verdict

Trust / 100

Final Verdict·get-hyperliquid-wallet.pages.dev

DANGEROUS

This is a cloned informational site impersonating Hyperliquid Wallet. Our analysis flags it as malicious due to its zero-day age, AV detections for phishing, and confirmed scam reports. Avoid interacting with it and stick to the official app.hyperliquid.xyz.

Do not visit the site or enter any wallet details. Use only the official Hyperliquid domain at app.hyperliquid.xyz.

AV engines

MT passes

Net signals

Scan another URL

Security review completemalwaretips.com/url-scan

Recently scanned

Other Dangerous reports

Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…

Loading comments…

This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.