pfpepe[.]com

This domain, pfpepe.com, is confirmed to have been involved in an account takeover scam. The domain was registered through Tucows Domains Inc. on October 05, 2025. Infrastructure analysis reveals that the domain resolves to the IP address 85.206.242.65, which is located in Lithuania and is associated with AS61272 Informacines sistemos ir technologijos, UAB. The site has been flagged by 10 out of 95 security vendors on VirusTotal, indicating a moderate level of detection.

The domain is also listed in one threat intelligence pulse on AlienVault OTX and appears on two security blocklists, including PhishDestroy and ScamSniffer. The page title found during analysis is 'Account Suspended,' which is consistent with a typical account takeover scam aiming to trick users into providing sensitive information or credentials. The domain is currently offline, which suggests the site may have been taken down or is no longer active. However, given the elevated risk level and the specific evidence of scam activity, defenders should continue to monitor the domain for any signs of reactivation.

It is recommended to block access to this domain and educate users about the risks of account takeover scams. The lack of an SSL certificate further decreases the trustworthiness of the site, as legitimate services typically secure their domains with SSL. Defenders should also cross-reference this domain with their internal logs to identify any potential past interactions or compromises.