hyprelquid[.]com

Analysis of the domain hyprelquid.com indicates a brand impersonation campaign targeting Facebook, classified as elevated risk. As of July 22, 2026, the domain is offline, but prior infrastructure assessments reveal critical red flags. The domain resolves to IP 179.43.170.230, hosted under AS51852 (Private Layer INC) in Switzerland, a provider frequently associated with malicious activity. It lacks an SSL certificate, a common indicator of low-effort phishing infrastructure, and is registered through the RIPE NCC, with only one nameserver configured, further reducing resilience against takedowns.

Detection data supports the malicious classification: Gridinsoft assigns a trust score of 0/100, and the domain appears on one security blocklist. PhishDestroy has proactively blocked access, while VirusTotal records a single detection from 95 security vendors, suggesting early but growing recognition of the threat. The page title, 'Voguepop – revolutionize sticky portals,' does not directly reference Facebook, though the scam type is explicitly labeled as brand impersonation in available threat intelligence. Defenders should treat this domain as part of a broader pattern of Facebook-themed phishing.

The absence of SSL, low trust scores, and hosting on a high-risk ASN are consistent with disposable phishing infrastructure. While the exact content of the page remains unanalyzed, the combination of technical indicators and detection vendor alerts warrants blocking at the DNS and network levels. Organizations should monitor for related domains registered through the same provider or resolving to the same IP range, as these may represent follow-up campaigns.