litteilpepe[.]com

Analysis indicates that the domain litteilpepe.com was registered on July 18 2025 through MAT BAO CORPORATION. The domain resolves to the Cloudflare edge address 104.21.112.1, which belongs to ASN 13335 in the United States. The TLS certificate presented is issued by Google Trust Services under the WE1 root, confirming that the site was served over HTTPS. An HTTP request to the host returns a 522 “Connection timed out” status, and the page title reported by passive monitoring is “litteilpepe.com | 522: Connection timed out”.

The site is currently listed as offline in the intelligence feed. Threat intelligence platforms have flagged the domain as a generic phishing operation; two of ninety‑five VirusTotal scanners have generated a detection, and the domain appears on one external blocklist maintained by PhishDestroy. Additional reputation data shows a Gridinsoft trust score of zero out of one hundred, reinforcing the malicious classification. The infrastructure utilizes Cloudflare’s HTTP/3 service, which can obscure the true origin server and complicate network‑level blocking.

At present, no further content analysis is available, and the exact phishing campaign payload or target brand has not been disclosed. Defenders should continue to block the IP address 104.21.112.1 and any DNS queries for litteilpepe.com, enforce outbound filtering for HTTPS traffic to this host, and monitor for any resurgence of activity. Because the domain is hosted behind Cloudflare, any re‑activation may employ a different edge node, so rule sets should be based on the domain name rather than a single IP. Ongoing vigilance is advised, including periodic re‑scans with multi‑engine services to capture any new detections.