hkgh[.]co[.]za

The domain hkgh.co.za is a generic phishing site that poses an elevated risk of credential theft. It does not impersonate a specific brand or deploy a crypto drainer kit. As of the latest verification, hkgh.co.za has been taken offline, though prior activity indicates it was actively used for phishing attempts.

Technical indicators confirm hkgh.co.za was flagged by 7 of 95 VirusTotal security vendors, including ADMINUSLabs, alphaMountain.ai, and CRDF. The domain was registered through HOSTAFRICA on November 22, 2023, and resolved to the IP address 102.130.122.5, hosted by AS328364 Host Africa (Pty) Ltd in South Africa. It appeared on one security blocklist (PhishDestroy) and was referenced in three AlienVault OTX threat intelligence pulses. The site lacked an SSL certificate, and its observed page title was 'Verifizierung – Authentifizierung'. The HTTP status returned was 429, and nameservers were ns1.host-ww.net and ns2.host-ww.net.

Individuals who may have interacted with hkgh.co.za should immediately change any passwords entered on the site, enable two-factor authentication on affected accounts, and monitor for unauthorized transactions or identity fraud. Report the domain to relevant authorities or platforms, such as local cybercrime units, Google Safe Browsing, or anti-phishing organizations like PhishTank. If financial or personal data was exposed, consider placing a fraud alert on credit reports.