thehelpinghanddebt[.]co[.]za

PhishDestroy first observed thehelpinghanddebt.co.za on Aug 18, 2026. Stored content metadata identifies Genericemail as the apparent target. The captured page title is “Festava Live - Bootstrap 5 CSS Template”. Current evidence score: 78/100 (critical).

Positive findings are stored from 5 sources: VirusTotal, OpenPhish, Spamhaus DBL, URLQuery, and URLScan. VirusTotal recorded 7 detections among 91 engines: alphaMountain.ai, Chong Lua Dao, Cluster25, Forcepoint ThreatSeeker, Fortinet, Gridinsoft, Sophos on Aug 18, 2026 at 03:46 UTC. OpenPhish listed the hostname in the separate external-blocklist snapshot on Aug 18, 2026 at 06:20 UTC. Spamhaus DBL: DBL_ABUSED_PHISH on Aug 18, 2026 at 06:30 UTC. URLQuery recorded 3 detections; no observation timestamp was retained. URLScan returned a malicious verdict with score 100; scan metadata linked the capture to Genericemail and assigned phishing as its category on Aug 18, 2026 at 05:08 UTC. Non-positive and contextual checks: Google Safe Browsing returned no flag on Aug 18, 2026 at 03:46 UTC.

The collector marked the hostname reachable on Aug 18, 2026 at 03:15 UTC, but did not retain the HTTP response code. Registration records for the domain list Afrihost as the registrar and Sep 13, 2021 as the creation date. At collection time, the hostname resolved to 154.0.174.13. The recorded endpoint location is Johannesburg, ZA. The stored server header is Apache. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. TLS metadata lists Let's Encrypt as the certificate issuer with validity through Oct 17, 2026; checked Aug 18, 2026 at 04:02 UTC.

The content indicators and 5 positive source findings support the current Genericemail impersonation and phishing classification. The target field identifies Genericemail, but the record does not establish whether the page requested credentials, a seed phrase, or a wallet connection.