littiepepe[.]com

Analysis of littiepepe.com shows a clear pattern of malicious activity targeting the Ethereum brand. The domain was registered on February 21, 2026 and presently resolves to the IP address 104.168.69.100, which belongs to HostPapa in the United States (ASN 36352). The site’s SSL certificate carries an R10 rating, indicating a low trust score.

The page title returned from the live host before takedown was "Little Pepe Presale | LILPEPE Token," which aligns with the reported crypto‑scam classification. Independent threat‑intel sources have listed the domain on three security blocklists, and it is explicitly blocked by PhishDestroy, MetaMask, and SEAL, reinforcing the suspicion of brand impersonation. VirusTotal scans show that one out of ninety‑five security vendors flagged the domain, providing at least one independent detection.

The domain is currently offline, which may be a temporary takedown or an evasion tactic, but the historical evidence remains relevant for defensive posture. Defenders should continue to block the domain at the network perimeter, monitor for any resurgence of the IP address or associated hosting provider, and add the domain to internal watchlists for brand‑impersonation alerts. Further investigation should focus on any residual DNS records, potential command‑and‑control infrastructure, and the possibility of reused hosting assets in future campaigns targeting Ethereum users.