Skip to content
Scammers.com
Crypto, investment & PonziReviewed

MalwareTips: hashnet.ai 'Liquid Hashrate' Bitcoin mining pitch named in Austrian FMA warning

MalwareTips published an investigation today into hashnet.ai, a one-page site selling what it calls 'Liquid Hashrate', Bitcoin mining power a buyer supposedly owns, earns from and can resell. MalwareTips says the page…

First reported
Reports
1

Source: malwaretips.com · published

Illustration: Investing and crypto scams

What happened

MalwareTips published an investigation today into hashnet.ai, a one-page site selling what it calls 'Liquid Hashrate', Bitcoin mining power a buyer supposedly owns, earns from and can resell. MalwareTips says the page shows no price, contract or withdrawal rule and its Start Mining button leads only to a sign-in screen. It reports that Austria's Financial Market Authority (FMA) published a warning on October 29, 2026 naming Hashnet Infrastructure LLC (Dubai) and Wealthier Corporation Limited (Hong Kong), listing hashnet.ai and support@hashnet.ai, and stating that neither has authorisation to distribute the HashNet product in Austria, where it counts as an alternative investment fund. MalwareTips notes the FMA warning is not a finding of fraud. It found the domain was registered on February 14, 2026 through Namecheap with the owner hidden by a privacy service, yet the site claims $300M+ capital deployed and 9,400+ BTC mined; by MalwareTips' arithmetic 9,400 BTC is about 21 days of all new Bitcoin worldwide and the site's yield figure exceeds the real rate roughly 8,000 times. Its Terms of Service never mention hashrate, hardware, Bitcoin, withdrawals or returns. MalwareTips could not verify what buyers receive after signing in or whether withdrawals work, and advises not to buy HashNet.

How the scam works

Mining and 'hashrate' investment pitches often promise returns from equipment or computing power that the customer never controls. MalwareTips notes that Austria's Financial Market Authority (FMA) published a warning on 29 October 2026 that names hashnet.ai, and that the domain and a support mailbox on the same domain were part of its review published on 11 November 2026. An FMA warning is a regulatory alert, not a criminal conviction.

Do not send money, crypto or identity documents to a mining platform just because the site looks technical. Check the firm against the FMA and any other regulator that covers you, and treat a support address on the same new domain as part of the offer, not as independent customer service.

Source

MalwareTips investigation, 11 November 2026: https://malwaretips.com/blogs/hashnet-ai-scam-or-legit/

Red flags

  • A mining or 'liquid hashrate' pitch that wants a deposit before you control any equipment.
  • A platform named in a financial-regulator warning, here the Austrian FMA warning of 29 October 2026.
  • A support mailbox on the same newly reviewed domain as the offer itself.
  • Pressure to send crypto or documents quickly to lock in a return.

If you were targeted

  1. 1Do not send money, crypto or identity documents to hashnet.ai on the strength of the site alone.
  2. 2Check the firm against the FMA and any other regulator that covers you.
  3. 3If you already paid, contact your exchange or bank and report the platform to the FMA.
  4. 4Treat the FMA warning as a regulatory alert, not as a criminal conviction.

MalwareTips: 'official'-named store wilsonsleatherofficial.com is a copycat built from copied brand catalog

MalwareTips published an investigation today calling wilsonsleatherofficial.com a fake store built on a copied catalog. It says the site's catalog listings, photos and branding are taken from real brands and stores, n…

  • wilsonsleatherofficial.com
  • Copycat store using a brand name plus 'official'; not the brand's own site (MalwareTips)
  • MalwareTips fake or copycat store cluster (12 Nov 2026)
Reported Nov 12, 20261 report

Phishing alert: icp0.io page impersonates ICPesa Bitcoin payment gateway

The phishing-alert account @TheThreatWire posted on X on 12 November 2026 (Phishing Alert #141) that hxxps://2q7ci-niaaa-aaaad-qg66q-cai.icp0.io/index.html is a phishing page impersonating ICPesa, a Bitcoin and ckBTC…

  • 2q7ci-niaaa-aaaad-qg66q-cai.icp0.io
  • Path /index.html; hosted on shared icp0.io gateway domain
  • Crypto wallet phishing, drainers and address-poisoning cluster (12 Nov 2026)
Reported Nov 12, 20261 report

MalwareTips: clothing store hervalife.com in scam network, 4 VirusTotal flags

MalwareTips published an investigation today rating hervalife.com a high-risk store that belongs to a scam network of near-identical shops sharing templates, product photos and return policies and reopening under new…

  • hervalife.com
  • Part of a scam network of near-identical dropshipping stores (MalwareTips)
  • MalwareTips fake or copycat store cluster (12 Nov 2026)
Reported Nov 12, 20261 report

MalwareTips: household-goods store deniudy.com in scam network, flagged by 5 VirusTotal vendors

MalwareTips published an investigation today rating deniudy.com a high-risk store that belongs to a scam network of near-identical shops sharing templates, product photos and return policies and reopening under new na…

  • deniudy.com
  • Part of a scam network of near-identical dropshipping stores (MalwareTips)
  • MalwareTips fake or copycat store cluster (12 Nov 2026)
Reported Nov 12, 20261 report

MalwareTips: candy store thebakedbox.in in scam network, flagged by 5 VirusTotal vendors

MalwareTips published an investigation today rating thebakedbox.in a high-risk store that belongs to a scam network of near-identical shops sharing templates, product photos and return policies and reopening under new…

  • thebakedbox.in
  • Part of a scam network of near-identical dropshipping stores (MalwareTips)
  • MalwareTips fake or copycat store cluster (12 Nov 2026)
Reported Nov 12, 20261 report

MalwareTips: 10-day-old mariellecollective.com clothing and bag store part of scam network

MalwareTips published an investigation today rating mariellecollective.com a high-risk store that belongs to a scam network of near-identical shops sharing templates, product photos and return policies and reopening u…

  • mariellecollective.com
  • Part of a scam network of near-identical dropshipping stores (MalwareTips)
  • MalwareTips fake or copycat store cluster (12 Nov 2026)
Reported Nov 12, 20261 report