littlepepe[.]co[.]com

On July 24, 2026, analysis of the domain littlepepe.co.com identified it as a brand‑impersonation site targeting the “across” brand. The site was hosted on the IP address 158.94.208.115, which belongs to AS202412 owned by Omegatech LTD and is geolocated in Germany. The domain resolves to this IP and uses the nameservers ns1.ddos-guard.net and ns2.ddos-guard.net. No TLS certificate was presented, indicating that HTTPS was not configured. The HTTP response returned a page titled “Little Pepe – The Future of Meme Culture | littlepepe.co.com”.

The domain has been listed on a single security blocklist and is specifically blocked by PhishDestroy. Gridinsoft assigned a trust score of 0 out of 100, reflecting a high likelihood of malicious intent. VirusTotal scanned the site with 95 AV engines and reported no detections; however, the absence of detections does not constitute evidence of safety. The current operational status is offline, and the site has been taken down. Evidence gaps remain: the exact phishing kit, any credential‑stealing forms, and the full list of affected victims have not been disclosed.

No SSL/TLS data, Safe Browsing verdicts, or OTX identifiers are available in the current intelligence set. Defenders should continue to block the domain at perimeter filters, monitor DNS queries for the associated IP and nameservers, and add the domain to internal watchlists. Additional scrutiny of traffic to ns1.ddos‑guard.net and ns2.ddos‑guard.net may reveal related infrastructure. Continuous re‑evaluation is advised in case the site reappears or new indicators emerge.