hederafi[.]live

This domain, hederafi.live, was registered on 15 August 2025 through NICENIC INTERNATIONAL GROUP CO., LIMITED and is hosted on Cloudflare infrastructure (nameservers arushi.ns.cloudflare.com and margo.ns.cloudflare.com). DNS resolution points to IP address 104.21.26.120, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. No TLS certificate is presented, indicating that HTTPS connections are either unavailable or improperly configured. The site title returned by a HTTP request is “Hello future | Hedera”, which does not match the claimed brand target of “across”. The domain is listed on a single security blocklist and has been explicitly blocked by PhishDestroy, reflecting active mitigation by at least one anti‑phishing organization.

Reputation scoring from Gridinsoft assigns a trust score of 0 out of 100, and Google Safe Browsing flags the domain for social engineering. VirusTotal analysis shows that three out of ninety‑five scanning engines flagged the domain, suggesting the presence of malicious indicators despite the low detection count. The overall risk rating is elevated, and the current operational status is offline, indicating that the site is no longer serving content at the time of assessment. Evidence points to a brand‑impersonation campaign that attempts to leverage the “across” brand, yet the publicly observed page title references Hedera, creating a mismatch that may be used to deceive users familiar with either brand.

The lack of SSL, the low trust score, and the presence on blocklists collectively increase confidence that the domain is being used for fraudulent purposes. Defenders should block DNS resolution to hederafi.live and its associated IP 104.21.26.120, monitor for any resurgence of activity, and ensure that email or web filtering solutions reference both the domain and the hosting ASN.