haseltaner[.]onelink[.]me

The domain haseltaner.onelink.me is a generic phishing site designed to deceive users into disclosing sensitive information such as login credentials or personal data. It does not impersonate a specific brand or employ a known crypto drainer kit. As of the latest verification, haseltaner.onelink.me has been taken offline, reducing immediate risk to potential victims.

Technical analysis of haseltaner.onelink.me reveals 0 of 95 VirusTotal vendors flagged the domain as malicious, and Google Safe Browsing has not issued any warnings. The domain appears on 1 security blocklist (PhishDestroy) and is registered through GANDI SAS, with a creation date of February 21, 2026. It resolves to the IP address 23.48.23.52, hosted on Akamai International B.V. infrastructure in Germany (AS20940). The SSL certificate is issued by DigiCert TLS RSA SHA256 2020 CA1, and the domain uses AWS nameservers. Gridinsoft assigns a trust score of 0/100, indicating high suspicion.

Users who may have interacted with haseltaner.onelink.me should immediately change any exposed credentials, particularly for accounts linked to the information shared. Enable two-factor authentication (2FA) on all critical services to mitigate unauthorized access. Monitor financial and online accounts for signs of fraudulent activity. Report the phishing domain to platforms like PhishTank, Google Safe Browsing, or local cybersecurity authorities to aid in broader threat mitigation.