# hasshhashdeed.top — SUSPICIOUS > hasshhashdeed.top is a newly registered domain (Mar 28, 2026) actively distributing a generic phishing kit to harvest credentials. ## Summary PhishDestroy identifies hasshhashdeed.top as an active credential-harvesting domain under formal investigation due to indicators of live phishing operations targeting unsuspecting users. Risk level for hasshhashdeed.top is marked UNDER_INVESTIGATION, indicating confirmed malicious intent but insufficient forensic evidence for definitive classification. The domain is flagged as running a generic phishing payload (VT 0/95 detections). Registration details reveal assignment to NICENIC INTERNATIONAL GROUP CO., LIMITED on March 28, 2026. The domain resolves to IPv4 address 81.91.178.193, which is provisioned with a Let’s Encrypt TLS certificate for increased authenticity. No third-party blocklists have flagged the infrastructure yet, keeping global exposure elevated. This domain poses an immediate risk to individuals who may receive unsolicited emails, messages, or links pointing to hasshhashdeed.top, as the infrastructure is designed to impersonate legitimate services and exfiltrate entered credentials. Users should refrain from clicking links, ignore any prompts for login details, and report suspicious messages immediately to their security teams. Network administrators can implement DNS sinkholing or block the IPv4 address 81.91.178.193 and the FQDN hasshhashdeed.top at the perimeter to mitigate exposure. Continuous monitoring of new TLS certificates issued to the IP range and newly observed subdomains is advised to forestall further abuse. ## Threat Details - Verdict: SUSPICIOUS - Site status: unknown (HTTP ?) ## Domain Intelligence - Registered: 2026-03-28 23:14:46 - Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED - IP: 81.91.178.193 ## Detection Status - VirusTotal: 0 vendors flagged - Google Safe Browsing: clean - Blocklists: 0 hits ## Evidence - Cloudflare Radar: https://radar.cloudflare.com/domains/hasshhashdeed.top - PhishDestroy: https://phishdestroy.io/domain/hasshhashdeed.top/ - LLM endpoint: https://phishdestroy.io/domain/hasshhashdeed.top/llm.txt ## If You Visited This Site 1. Change any passwords you may have entered 2. Enable 2FA on all related accounts 3. Monitor your accounts for unauthorized activity 4. Report to: FBI IC3, Europol, local authorities --- Report by PhishDestroy | https://phishdestroy.io/domain/hasshhashdeed.top/ Last updated: 2026-04-05