app[.]kekspace-m[.]xyz

The domain app.kekspace-m.xyz was registered on 2026-02-21 and is currently taken offline. Analysis of public records shows the site served a page titled “Kekspace - A PepeCoin Production” and presented an SSL certificate identified as R13. The domain has been listed on two security blocklists and is actively blocked by the PhishDestroy and ScamSniffer filtering services. VirusTotal data indicates that two of ninety‑three scanning engines returned a malicious verdict, confirming the presence of phishing‑related activity.

No additional infrastructure details such as IP address, ASN, or hosting provider are available in the supplied intelligence, leaving the broader command‑and‑control footprint unresolved. The limited detection surface suggests the site was short‑lived, which aligns with its offline status at the time of this report. Defenders should ensure that any outbound traffic to app.kekspace-m.xyz is denied at the network perimeter and that endpoint protection solutions are updated to include the two malicious detections observed on VirusTotal.

Because the domain appears on multiple reputable blocklists, adding it to internal URL filtering policies will reduce exposure. Continuous monitoring of newly registered domains that reference “Kekspace” or “PepeCoin” is advisable, as the naming pattern may be reused in future phishing campaigns targeting cryptocurrency enthusiasts. Until further technical artifacts such as hosting IPs or payload samples become available, the primary mitigation remains blocking and logging any connection attempts to this domain.