hapevex[.]com

PhishDestroy identifies hapevex.com as an active credential theft site operating under a generic phishing threat type. This domain does not mimic a specific brand but instead uses a standalone lure to harvest user credentials. The page appears to be a simple login form designed to deceive visitors into submitting sensitive information, likely targeting financial or personal accounts. No advanced drainer kit or obfuscation was detected in initial analysis, suggesting a low-complexity but effective attack vector.

Technical indicators confirm elevated risk: VirusTotal detection stands at 1 out of 95 security vendors as of the latest scan. The domain is registered through Namecheap Inc., with hosting linked to a shared IP address. Public records indicate the domain was created on June 1, 2024, and currently shows no presence on Google Safe Browsing (GSB) lists. Cross-referencing with blocklist aggregators reveals zero prior detections, indicating a newly activated threat. Despite the low VT score, the domain’s recent creation and lack of historical blocking signal a rapidly evolving risk.

As of this assessment, hapevex.com remains active and accessible. Immediate action is recommended: users should avoid interaction and report the domain via their browser or security tools. While the current threat level is elevated, the absence of widespread detection suggests a narrow scope. PhishDestroy advises caution and proactive blocking at the network or DNS level to prevent exposure. Remaining risk hinges on user awareness and timely dissemination of this intelligence.