hederahashgraph[.]co[.]za

Analysis of hederahashgraph.co.za indicates that the domain was registered on 21 February 2026 and is currently taken offline. The site resolved to IP address 164.160.91.60, which is hosted in South Africa and belongs to AS328037 Optify Systems (Pty) Ltd. The SSL certificate associated with the domain received an R10 rating, suggesting a low‑trust or self‑signed certificate. The page title returned by the server was "My WordPress Blog," and the domain is flagged as impersonating the WordPress brand, matching the listed brand target. A Gridinsoft trust score of 0 out of 100 was recorded, indicating an extremely low reputation rating.

The domain appears on one security blocklist and has been explicitly blocked by the PhishDestroy service. VirusTotal scans show that three of ninety‑five security vendors flagged the domain, providing additional corroboration of malicious intent. The overall scam classification is identified as brand impersonation, with the specific target being WordPress.

While the offline status prevents real‑time interaction, defenders should continue to monitor the associated IP range for any re‑activation or related activity, enforce blocklist entries in perimeter defenses, and ensure that any inbound traffic to the IP is denied. Organizations using WordPress should be reminded to verify URLs and TLS certificates before credential entry, as the low SSL rating and zero trust score suggest a high likelihood of credential harvesting. Threat intelligence feeds should be updated to include the domain and its IP, and any detection rules that reference the brand impersonation pattern should be tuned to capture similar future attempts.