hapina-eta[.]vercel[.]app

PhishDestroy identifies the domain hapina-eta.vercel.app as an active credential-harvesting campaign targeting unsuspecting users. This domain is currently classified under the generic phishing threat type and maintains an elevated risk status, indicating active exploitation in the wild.

This domain was flagged by 7 of 95 VirusTotal security vendors, resolving to IP address 64.29.17.195. The domain is registered through Vercel Inc. and utilizes a legitimate SSL certificate issued by Google Trust Services, which may contribute to initial trust perception among users. While specific creation dates and additional blocklist counts are not provided in available telemetry, the presence of 7 positive detections across multiple vendor engines underscores its malicious classification.

The current status of hapina-eta.vercel.app remains active, posing a direct threat to user credentials through deceptive login portals. Users are strongly advised to avoid interacting with this domain and verify any unexpected login prompts through official channels. Organizations should consider blocking this domain at the network perimeter and updating endpoint protection rules to include this indicator. If credentials have been entered, users should immediately reset passwords and enable multi-factor authentication where available. Report any observed activity to relevant security teams for further investigation.