hapstor-shop[.]live

This domain is flagged as a fake e-commerce platform designed to harvest user credentials and payment details. The site displays a Russian-language page titled 'Выберите товар' (Choose Product), mimicking legitimate retail interfaces to trick visitors into entering sensitive financial information. Analysis indicates the site is engineered to capture credit card numbers, login credentials, and personal data under the guise of a product selection process, a common tactic in phishing operations targeting online shoppers. Infrastructure analysis reveals multiple high-confidence indicators of malicious activity. The domain was registered on March 27, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with fraudulent domains. It resolves to the IP address 172.67.140.211 and is flagged by 4 out of 95 security vendors on VirusTotal, including detections for phishing and fraudulent transaction pages. Additionally, the domain appears on one security blocklist and was previously identified in a threat intelligence pulse, further corroborating its malicious intent. If you visited hapstor-shop.live or entered any information on the site, immediate action is required. First, disconnect the device used to access the site from the network to prevent potential data exfiltration. Next, change passwords for any accounts accessed on the same device, particularly financial or email accounts, using a separate, secure device. Monitor bank and credit card statements for unauthorized transactions and consider placing a fraud alert with credit bureaus. Report the incident to local cybercrime authorities and provide the domain, IP address (172.67.140.211), and any transaction details for further investigation.