migrate-pepu-network[.]dashboard-auth-secure[.]com

PhishDestroy identifies a live credential phishing domain named migrate-pepu-network.dashboard-auth-secure.com that mimics a legitimate authentication portal to harvest usernames and passwords. This site lures users into entering login credentials under the guise of a secure dashboard for Pepu Network, a blockchain or cryptocurrency-related service. The domain was flagged by Google Safe Browsing under SOCIAL_ENGINEERING and is currently blocked by MetaMask and SEAL, two trusted security platforms. The presence of an SSL certificate from Google Trust Services may further deceive visitors into believing the site is legitimate, increasing the risk of successful credential theft. This domain exhibits multiple red flags consistent with active phishing campaigns. VirusTotal shows 0 detections out of 95 scanners, indicating it has evaded detection by mainstream antivirus engines as of the latest scan. The domain was registered on May 29, 2025, which is unusually recent for a site claiming to provide secure authentication services, and it resolves to IP address 104.21.43.4, a known malicious hosting infrastructure. Furthermore, the domain has been identified on 2 separate security blocklists, confirming its malicious reputation. It is registered through Web Commerce Communications Limited dba WebNic.cc, a registrar frequently exploited by phishing actors due to lax verification processes. The combination of a newly registered domain, hosting on a suspicious IP, and zero antivirus detections suggests this phishing site is currently active and operational. Users who visited migrate-pepu-network.dashboard-auth-secure.com should immediately assume their credentials may have been compromised and take swift action. If you entered any login details on this site, change your password on the legitimate Pepu Network platform immediately. Enable two-factor authentication (2FA) if available. Scan your device for malware using a reputable antivirus tool and monitor your accounts for unauthorized transactions or suspicious activity. Report the domain to your security team or platform provider. Avoid visiting this domain or any linked pages. For ongoing protection, use browser-based phishing filters, keep security software updated, and verify website authenticity through official channels before entering sensitive information.