pepubridges[.]live

This domain, pepubridges.live, operates as a credential theft platform designed to harvest user login credentials under the guise of Cloudflare verification. The site presents itself as a security checkpoint, exploiting trust in Cloudflare's infrastructure to trick visitors into entering sensitive account details. Analysis indicates the domain is structured to capture and exfiltrate credentials, likely for unauthorized access to email, financial, or corporate systems. Infrastructure analysis reveals the domain was registered on February 21, 2026, through NiceNIC International Group Co., Limited, a registrar frequently associated with high-risk domains. It resolves to the IP address 188.114.96.3 and employs Cloudflare's services, including Cloudflare Browser Insights and HTTP/3, to mask its true origin and evade detection. The SSL certificate is issued by Google Trust Services, adding a layer of legitimacy to the malicious site. As of the latest scan, 6 out of 95 security vendors on VirusTotal have flagged the domain as malicious, and it appears on at least one security blocklist. Users who visited pepubridges.live should assume their credentials may have been compromised. Immediately reset passwords for any accounts accessed while the site was active, prioritizing email, banking, and work-related platforms. Enable multi-factor authentication (MFA) on all critical accounts to mitigate unauthorized access. Monitor financial statements and account activity for signs of fraudulent transactions or unauthorized logins. If corporate credentials were entered, notify the organization's security team to initiate incident response protocols. Avoid reusing passwords across multiple sites, and consider using a password manager to generate and store unique credentials securely.