app[.]littlepepe-presale[.]world

The domain app.littlepepe-presale.world was registered on February 21, 2026 and is currently offline. DNS resolution points to the IP address 192.3.190.186, which is hosted in the United States under ASN 36352 (HostPapa). The site served an SSL certificate identified as R11, indicating a low‑trust certificate. The page title retrieved from the site reads “Little Pepe Presale | LILPEPE Token,” and the threat profile labels the operation as a crypto scam that impersonates the Ethereum brand.

Independent analysis shows a Gridinsoft trust score of 0 out of 100, and the domain appears on two security blocklists. It has been actively blocked by PhishDestroy and ScamSniffer. VirusTotal scans report that three of ninety‑three security vendors flagged the domain as malicious, reinforcing the suspicion of malicious intent. The risk level is elevated, reflecting the combination of brand impersonation, low trust score, and blocklist presence.

Defenders should continue to monitor the associated IP address for any re‑use, enforce outbound filtering to block connections to this domain and its IP, and ensure that any internal references to “Little Pepe” or “LILPEPE Token” are flagged as potential phishing attempts. Because the site is offline, there is no current payload to analyze, but the observed infrastructure—US‑based hosting, a weak SSL certificate, and rapid domain creation—suggests a disposable phishing campaign. Organizations should update threat intelligence feeds with the domain, its IP, and the associated blocklist entries, and consider adding the domain to internal deny lists until the infrastructure is fully retired.