Zapper's .fi domain registrar was compromised via social engineering of Netim's support team, allowing attackers to redirect traffic to a malicious domain. Users visiting the fake zapper.fi were exposed to credential harvesting and unauthorized transactions. Zapper immediately notified users to use only zapper.xyz while working to recover the domain.

According to an official announcement from DeFi asset management protocol Zapper, its .fi domain was hijacked via social engineering. The current zapper(.fi) page is malicious and should be avoided — users are strongly advised not to click on any related links.