hoourglass[.]com

This domain is currently flagged as a high‑risk generic phishing site. hoourglass.com was registered on 21 February 2026 through NiceNIC International Group Co., Limited and resolves to 172.67.144.209, an address owned by Cloudflare, Inc. (AS13335) located in the United States. The authoritative nameservers are samara.ns.cloudflare.com and sri.ns.cloudflare.com, indicating the site is fronted by Cloudflare’s edge network and is served over HTTP/3. The site returns an HTTP 301 redirect and presents an SSL certificate issued by Google Trust Services under the “WE1” name, confirming the use of a valid, publicly trusted TLS chain.

The page title observed at the root URL is “Hourglass – institutional yield for stablecoins.” No further content has been publicly disclosed, so the exact landing‑page experience remains unknown. The domain appears on two independent blocklists – PhishDestroy and ScamSniffer – and has a Gridinsoft trust score of 0 / 100, the lowest possible rating. VirusTotal analysis shows that three of ninety‑five security vendors have flagged the domain, reinforcing the suspicion of malicious intent.

Given the combination of a recent registration, use of reputable hosting infrastructure, a legitimate‑looking TLS certificate, and active listings on phishing‑focused blocklists, defenders should treat hoourglass.com as a malicious actor. Recommended mitigations include adding the domain to network‑level deny lists, updating endpoint web‑filter policies, and monitoring DNS queries for any look‑ups to the IP address 172.67.144.209. Analysts should also track any future changes to the HTTP response code or page content, as the site may evolve to host credential‑harvesting forms or redirect victims to additional payloads.