fi-repeg[.]com

This domain is flagged as an active credential harvesting phishing operation targeting authentication credentials through deceptive login interfaces. Analysis indicates elevated risk due to confirmed malicious infrastructure and detection by multiple security mechanisms, despite its current offline status.

Infrastructure analysis reveals the domain fi-repeg.com was registered on June 11, 2026, through Global Domain Group LLC, a registrar frequently associated with high-risk domains. It resolved to IP address 188.114.97.3 and was detected by 4 out of 95 security vendors on VirusTotal. The domain appears on three security blocklists and has been referenced in four threat intelligence pulses on a major open-source threat exchange platform. The SSL certificate was issued by Google Trust Services, which, while legitimate, is commonly exploited by threat actors to lend false credibility to phishing sites.

Mitigation requires immediate action from network defenders and end-users. Organizations should block the domain and its associated IP at the perimeter, update endpoint protection signatures, and monitor for credential reuse attempts. Users who may have interacted with the domain should reset passwords for any accounts accessed during the exposure window, enable multi-factor authentication, and review connected sessions for unauthorized access. Security teams are advised to conduct retrospective log analysis for connections to 188.114.97.3 or fi-repeg.com to identify compromised accounts.