ai[.]hedera[.]hr

This domain, ai.hedera.hr, is identified as a generic phishing site targeting users of the Hedera Network, a decentralized public ledger. The domain is currently offline, but prior analysis confirms its malicious intent to deceive visitors into disclosing sensitive credentials or interacting with fraudulent smart contracts. The impersonation of Hedera Network suggests a focus on cryptocurrency or blockchain-related fraud, likely leveraging social engineering tactics to exploit trust in the brand. Infrastructure analysis reveals the domain was registered on April 08, 2026, an unusually future-dated creation that may indicate registry manipulation or a placeholder entry. It resolves to the IP address 151.101.2.15, a Fastly CDN endpoint, which is often abused for rapid deployment of malicious content. The domain appears on 3 security blocklists and is actively blocked by at least three security providers. A VirusTotal scan indicates 5 of 95 security vendors flag this domain as malicious, while a Gridinsoft trust score of 0/100 further corroborates its high-risk classification. The site presented a page titled 'Hedera AI' and used a Let's Encrypt SSL certificate, a common tactic to feign legitimacy. While ai.hedera.hr is currently offline, the domain remains a latent threat due to its registration status and historical malicious activity. Organizations and individuals are advised to maintain blocklist entries for this domain and its associated IP address. Network administrators should monitor for DNS queries or HTTP requests to ai.hedera.hr and investigate any outbound connections to 151.101.2.15. End-users should be alerted to the impersonation of Hedera Network and instructed to verify domain authenticity before interacting with any Hedera-related services. If credentials or wallet information were previously entered on this domain, immediate revocation and replacement are recommended.