serverupdate[.]live

This domain, serverupdate.live, is a confirmed credential phishing site designed to steal login credentials from users by impersonating a legitimate Dapp Network server portal ecosystem. The site presents a fake authentication interface to trick visitors into entering sensitive account information, which is then harvested by attackers. The threat is classified as credential theft, a specific form of phishing that targets usernames, passwords, and potentially multi-factor authentication tokens.

Analysis confirms the site is malicious. The domain was created on February 21, 2026, and registered through NiceNIC International Group Co., Limited, a registrar known for being used in phishing operations. It resolves to IP address 172.67.208.232, which is associated with Cloudflare's content delivery network, and uses an SSL certificate from Google Trust Services. Despite VirusTotal reporting 0 detections out of 95 security vendors at the time of analysis, the site appears on 1 security blocklist and has a Gridinsoft trust score of 0/100. The domain has been taken offline by PhishDestroy, further supporting its malicious classification.

If a user visited serverupdate.live and entered any credentials, they should immediately change passwords for the affected accounts and enable multi-factor authentication where available. Monitor accounts for unauthorized activity and report the incident to relevant service providers. Avoid reusing passwords across sites. Users who only visited the page without entering data are at lower risk but should remain vigilant against follow-up phishing attempts. The domain is now offline, but similar threats may re-emerge under new domains.