gorbagana-whitelist[.]com

This domain was registered on August 18 2025 through MAT BAO CORPORATION and resolves to IP address 104.21.45.232. Infrastructure analysis reveals use of Cloudflare along with HTTP/3 protocol support while the SSL certificate originates from Google Trust Services. The domain remains active on the report date of July 12 2026 and serves content under the page title Hyperliquid in a documented brand impersonation campaign against the same target. Known intelligence records consistent presence across multiple threat feeds with no contradictory data on operational status.

Detection counts include flags from 14 out of 95 security vendors on VirusTotal together with appearance on 2 security blocklists. The domain is referenced in 24 threat intelligence pulses from open exchange repositories and carries a trust score of 0 out of 100 from an independent evaluation system. These quantitative indicators align with high risk classification for brand impersonation activity and support the active status designation without reliance on unverified external claims.

Uncertainties remain around the exact page functionality because direct content inspection has not occurred beyond the recorded title. The registration date lies within normal historical parameters for 2025 and does not introduce temporal anomalies. No additional deployment kit identifiers or ASN level attributes appear in the available data set so conclusions stay limited to the confirmed observables.

Defenders should add both the domain gorbagana-whitelist.com and the IP 104.21.45.232 to internal blocklists and monitoring rulesets. Continuous correlation against updated threat intelligence repositories is advised to track any infrastructure changes. Organizations associated with the targeted brand benefit from incorporating this indicator into existing detection playbooks and conducting periodic reviews of related DNS telemetry for similar patterns.