hashsafepro[.]com

Analysis indicates that www.hashsafepro.com was registered on July 31, 2025 through Wix.Com Ltd. The domain resolves to 34.149.87.45, an address owned by Google LLC (AS396982) located in the United States. DNS resolution uses Wix‑provided nameservers ns6.wixdns.net and ns7.wixdns.net, confirming the use of the Wix hosting platform. The site served an SSL certificate from Let’s Encrypt (R12) and employed modern transport features including HSTS, HTTP/3 and Google Cloud CDN, while frontend components were identified as Wix, React, AngularJS, jQuery, and Google Cloud services. An HTTP request to the host now returns a 404 status, and the current page title reads “HashSafePro | Legit Hackers”, indicating that the content has been taken offline but was previously associated with a phishing‑related campaign.

Reputation data shows the domain appears on a single security blocklist and is explicitly blocked by PhishDestroy. AlienVault OTX records the domain in one threat‑intelligence pulse. VirusTotal scans report a single positive detection out of 95 vendors, reinforcing the suspicion of malicious intent. No additional industry‑wide safe‑browsing or reputation scores are available.

The combination of a recent registration date, use of a legitimate‑looking hosting provider, a valid TLS certificate, and the presence on phishing‑specific blocklists suggests the domain was created to host a generic phishing lure, likely targeting users of “HashSafePro” or related services. Because the site is presently offline, the immediate risk of active credential harvesting is low, but the infrastructure remains under the control of the adversary and could be re‑activated. Defensive operators should continue to block the domain at network perimeter and DNS layers, monitor for any resurrected activity, and consider adding the IP address 34.149.87.45 to blacklist rules.