wakeorpay[.]app

The domain wakeorpay.app is an active phishing site engaged in brand impersonation targeting WordPress users. It presents itself as a legitimate WordPress-related service to deceive visitors into disclosing login credentials or other sensitive information. As of the latest verification, wakeorpay.app remains operational and poses an elevated risk due to its deceptive nature, though no crypto drainer kit has been identified.

Technical indicators confirm wakeorpay.app is flagged by 2 of 95 security vendors on VirusTotal, including SOCRadar and Webroot. The domain is registered through Cloudflare, Inc. and resolves to the IP address 172.67.200.96, hosted on Cloudflare's infrastructure in the US. It appears on one security blocklist (PhishDestroy) and uses an SSL certificate issued by Google Trust Services (WE1). The observed page title reads 'Parked Domain name on Hostinger DNS system,' and the site employs technologies such as Cloudflare Browser Insights and HTTP/3. Gridinsoft assigns it a trust score of 0/100, reinforcing its classification as a phishing threat impersonating WordPress.

Individuals who may have interacted with wakeorpay.app should immediately change any exposed passwords, particularly for WordPress accounts, and enable two-factor authentication (2FA) where available. Monitor accounts for unauthorized activity and report any suspected fraud to financial institutions or relevant platforms. The domain can be reported to Google Safe Browsing, PhishTank, or the impersonated brand (WordPress) to aid in takedown efforts. If crypto wallet interactions occurred, revoke any token approvals and consider transferring funds to a new wallet as a precaution.