hashpet[.]wtf

The domain hashpet.wtf is actively serving content and has been classified as a high‑risk brand‑impersonation site targeting the BNB Chain ecosystem. Infrastructure analysis shows the domain resolves to IP address 216.198.79.1, hosted within Amazon’s AS16509 network in the United States. Registration occurred on March 07, 2026 through GoDaddy.com, LLC, with authoritative name servers ns21.domaincontrol.com and ns22.domaincontrol.com. The site presents a valid TLS certificate issued by Let’s Encrypt (R12) and enforces HSTS, indicating proper HTTPS configuration. HTTP responses return a 307 temporary redirect, suggesting intentional redirection logic. Technology fingerprints identify a Node.js stack running React, Next.js, and Webpack on a Vercel‑derived environment. Security assessments reveal a Gridinsoft trust score of 0/100 and a detection by PhishDestroy, confirming active malicious use. VirusTotal scans report four of ninety‑four security vendors flagging the domain, reinforcing the threat posture. The page title declares “HashPet — Web3 Pet Care Platform | Earn Crypto for Pet Care,” but no further content analysis is available. Defenders should immediately block hashpet.wtf at network perimeter and incorporate the IP 216.198.79.1 into threat‑intel feeds. Continuous monitoring of DNS changes and any additional malware callbacks is advised, as the current evidence indicates an operational crypto‑scam infrastructure leveraging brand impersonation techniques.