hg-project[.]com

hg-project.com is currently active and returns an HTTP 301 redirect. The site presents the title “H.U.G.O INFO”. Infrastructure analysis shows the domain resolves to 149.154.159.121, an address registered to EDIS GmbH in Germany. The domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and uses the public‑suffix nameservers ns3.my-ndns.com and ns4.my-ndns.com. TLS is provided by Let’s Encrypt (certificate identifier YE2). VirusTotal records indicate that 4 of 91 scanning engines have flagged the host, and the domain appears on a single external blocklist. PhishDestroy has already added the domain to its blocklist, confirming its classification as a generic phishing site. No additional content has been publicly disclosed; the only observable element is the page title, which does not reveal a targeted brand or service. Analysts should ingest the indicator set (domain, IP, nameservers, SSL fingerprint) into perimeter defenses, update URL filtering and DNS sinkhole rules, and monitor for any new payloads or redirects that may be introduced. Continued observation is advised to detect possible evolution of the campaign.