migrate-pepeunchained-en[.]dashboard-auth-secure[.]com

This domain, migrate-pepeunchained-en.dashboard-auth-secure.com, is identified as a high-risk phishing infrastructure designed to impersonate MetaMask, a cryptocurrency wallet service. Analysis indicates the site employs brand impersonation tactics to deceive users into disclosing sensitive credentials or executing unauthorized transactions. No explicit drainer kit signatures were detected in initial scans, though the presence of FASTPANEL as the page title suggests administrative or hosting framework exploitation, potentially facilitating credential harvesting or malware distribution. Infrastructure analysis reveals the following technical indicators: the domain was registered on May 29, 2025, through Web Commerce Communications Limited dba WebNic.cc. It resolves to the IP address 104.21.43.4, which is associated with Cloudflare’s network, leveraging HTTP/3 for enhanced performance and obfuscation. Google Safe Browsing classifies the domain under the SOCIAL_ENGINEERING category, and it appears on two security blocklists. VirusTotal reports 16 out of 95 security vendors flagging the domain as malicious, while Gridinsoft assigns a trust score of 0/100, reinforcing its high-risk classification. As of the latest assessment, the domain has been taken offline, likely due to mitigation efforts by hosting providers or security teams. However, residual risk persists due to the domain’s recent registration and the potential for infrastructure reuse. Users who interacted with the domain prior to its takedown should assume credential exposure and initiate account reviews, particularly for MetaMask or other cryptocurrency-related services. Organizations are advised to monitor for related domains registered under the same registrar or resolving to the identified IP address, as threat actors frequently rotate infrastructure to evade detection.