pep-coin[.]com

pep-coin.com is currently active and classified as a generic phishing site. The domain was registered on September 10 2025 through Tucows Domains Inc. and is hosted behind Cloudflare’s network (AS13335). DNS resolution returns the IP address 172.67.213.104, which belongs to Cloudflare’s US edge infrastructure. The TLS certificate is issued by SSL Corporation via Cloudflare TLS Issuing ECC CA 3, confirming Cloudflare’s TLS termination. HTTP requests receive a 403 status and the only observed page title is “Just a moment…”, suggesting the site presents a challenge page rather than legitimate content. Infrastructure analysis reveals the domain appears on two public security blocklists and has been flagged by the PhishDestroy and ScamSniffer feeds. A Gridinsoft trust score of 0 / 100 further corroborates its malicious reputation. Nameservers are listed as kinsley.ns.cloudflare.com and lewis.ns.cloudflare.com. No additional payloads, phishing kits, or target brands have been identified in the available data. Defenders should block DNS resolution to 172.67.213.104, enforce URL filtering for pep-coin.com, and monitor outbound traffic to Cloudflare edge nodes that may be used for credential harvesting. Continuous monitoring is recommended to detect any changes in page content, HTTP response codes, or new infrastructure indicators.