pepe-unchained-official[.]github[.]io

This domain, pepe-unchained-official.github.io, is flagged for brand impersonation targeting Ethereum, a prominent blockchain platform. The page presents itself as the "Pepe Unchained™ | Home | Official Site," leveraging the branding of a known cryptocurrency project to deceive users into engaging with fraudulent content. Analysis indicates no direct evidence of a crypto drainer kit at this stage, but the domain’s structure and branding suggest an intent to mislead users into disclosing sensitive information or transferring assets under false pretenses.

Infrastructure analysis reveals the domain is hosted on GitHub Pages, registered through GitHub, Inc., and resolves to the IP address 185.199.109.153, located in the United States under AS54113 (Fastly, Inc.). The SSL certificate is issued by Let’s Encrypt (R12), a common provider for both legitimate and malicious domains. As of the latest assessment, the domain has a VirusTotal detection score of 0/95, indicating no antivirus engines have flagged it yet. However, it appears on one security blocklist, suggesting preliminary detection by at least one threat intelligence source. No creation date is publicly available for GitHub Pages subdomains, limiting temporal analysis.

The domain remains active and unmitigated, with no evidence of takedown or suspension by the hosting provider. Users are advised to exercise caution when interacting with this domain, particularly if prompted for wallet connections, private key disclosures, or cryptocurrency transfers. The presence on a single blocklist, combined with the lack of antivirus detections, underscores the need for continuous monitoring. Organizations and individuals should update their blocklists to include this domain and remain vigilant for similar impersonation attempts targeting cryptocurrency brands.