# haepux.com — MALICIOUS

> haepux.com engages in generic phishing targeting users with a 5/95 VirusTotal detection. Check the full report for detailed threat analysis.

## Summary
PhishDestroy identifies haepux.com as an active domain involved in generic phishing schemes. Although no specific brand impersonation or drainer kit has been detected, the domain poses an elevated risk by attempting to deceive users with fraudulent tactics. The domain's activity is consistent with attempts to harvest sensitive information under false pretenses.

Technical indicators reveal that haepux.com was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on April 07, 2026. It resolves to the IP address 188.114.97.3 and uses a Let's Encrypt SSL certificate to appear legitimate. VirusTotal flags the domain with 5 detections out of 95 security vendors. There is no Google Safe Browsing (GSB) status mentioned, and blocklist counts remain unspecified in available data.

Currently, haepux.com remains active with an elevated threat level. Security teams should monitor and block this domain to protect users from potential credential theft or fraud. End users are advised to avoid interacting with haepux.com links or providing personal information. Continued vigilance and timely updates to security filters are recommended to mitigate ongoing risk associated with this domain.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-04-07 21:54:10
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 5 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/87e66414-3582-4114-93a5-f6a94b9ba7cf
- PhishDestroy: https://phishdestroy.io/domain/haepux.com/
- LLM endpoint: https://phishdestroy.io/domain/haepux.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/haepux.com/
Last updated: 2026-04-11