hashpackdesktop[.]net

The domain hashpackdesktop.net is identified as a brand impersonation threat, specifically targeting Discord. The domain was created on February 23, 2026, and is associated with a high risk level. No drainer kit has been identified in the analysis.

Infrastructure analysis reveals that hashpackdesktop.net resolves to the IP address 68.65.122.116, which is located in the United States and is registered to AS22612 Namecheap, Inc. The SSL certificate is issued by Sectigo Public Server Authentication CA DV R36. The domain appears on three security blocklists and is flagged by 13 out of 95 security vendors on VirusTotal. The page title was found to be 'Download HashPack | HashPack'.

Currently, the domain is offline, which reduces the immediate risk. However, the domain has been blocked by several security platforms, including PhishDestroy, MetaMask, and SEAL. Despite the offline status, there remains a risk that the domain could be reactivated. Security teams are advised to monitor for any signs of reactivation and to ensure that users are aware of the potential threat posed by this domain.