aha04346[.]vercel[.]app

Analysis of the domain aha04346.vercel.app indicates it is operating as a phishing page mimicking the title 'Hacker News,' a known technology news aggregation site. The domain was registered on March 30, 2026, and remains active as of July 12, 2026. Infrastructure analysis reveals it is hosted on Vercel, Inc. infrastructure, resolving to the IP address 64.29.17.3, located in the United States. The domain currently returns an HTTP 200 status, suggesting the page is accessible, though no nameservers were detected during investigation. The domain appears on three security blocklists, and multiple security vendors have flagged it as malicious, including PhishDestroy, MetaMask, and SEAL. Despite these detections, a scan conducted by 94 vendors on VirusTotal did not result in any flags, though this absence does not confirm the domain's safety. The SSL certificate is issued by Google Trust Services (WR1), and the site employs HSTS, which may complicate user warnings or interception attempts. Given the domain's recent registration, active status, and presence on security blocklists, defenders should treat this as a high-risk phishing resource. Network-level blocking or monitoring of connections to 64.29.17.3 is recommended. Further investigation into the exact content and targeting of the page is warranted, as the current data does not specify whether this is a credential-harvesting attempt, malware distribution, or another form of phishing. The use of a legitimate hosting provider complicates takedown efforts, and defenders should prioritize detection and response measures.