hy[.]perliquid[.]pro

As of July 22, 2026, the domain hy.perliquid.pro has been flagged as a brand impersonation phishing campaign targeting the WordPress brand. The domain was created on February 21, 2026, and currently resolves to the IP address 104.21.27.236, which is located in the United States under the ASN AS13335, operated by Cloudflare, Inc. Analysis indicates that the domain is associated with elevated risk levels and has been taken offline, suggesting potential defensive actions or takedown efforts by security teams. The SSL certificate for this domain is identified as WE1, which may indicate a use of standard encryption to gain user trust.

The page title for the domain is listed as 'Default page', which does not provide specific details about the content or structure of the site. The domain appears on two security blocklists, specifically PhishDestroy and ScamSniffer, highlighting its recognition as a threat by these platforms. Gridinsoft has assigned a trust score of 0 out of 100, indicating a complete lack of trustworthiness.

Defenders reviewing this domain should be cautious of any links or content that may have been distributed before the takedown and should consider the likelihood of residual phishing attempts. The domain's presence on blocklists and its zero trust score strongly suggest that it has been involved in malicious activities. Regular monitoring and updated threat intelligence feeds are recommended to prevent any potential reactivation or similar campaigns from the same threat actors.