alkimi[.]pro

This domain, alkimi.pro, is actively engaged in brand impersonation targeting WordPress users. Analysis indicates the site is designed to mimic legitimate WordPress services, potentially tricking visitors into disclosing sensitive information such as login credentials, API keys, or other authentication details. The infrastructure is structured to appear as an official WordPress portal, increasing the likelihood of successful social engineering attacks against unsuspecting users or administrators. Evidence supporting this assessment includes detection by 8 out of 95 security vendors on VirusTotal, a Gridinsoft trust score of 0 out of 100, and presence on one security blocklist. The domain was registered on August 08, 2025, through HOSTINGER operations, UAB, and currently resolves to the IP address 84.32.84.32. Infrastructure analysis reveals the use of Hostinger CDN, Google Analytics, and HTTP/3, alongside a Let's Encrypt SSL certificate, which may lend a false sense of legitimacy to the site. The page title, 'Parked Domain name on Hostinger DNS system,' suggests an attempt to obscure its true purpose while maintaining operational readiness. Users who have visited alkimi.pro should immediately revoke any credentials or sensitive information entered on the site. Clear browser cache and cookies to remove any stored session data. Monitor accounts associated with WordPress or related services for unauthorized activity, including logins, plugin installations, or configuration changes. If financial or administrative access was compromised, initiate incident response protocols, including password resets and multi-factor authentication enforcement. Network-level blocking of the domain and its resolving IP (84.32.84.32) is recommended to prevent further exposure.