liitlpepe[.]com

liitlpepe.com was registered on February 21 2026 through Tucows Domains Inc. The domain resolves to the IPv4 address 149.28.147.41, which belongs to AS20473 The Constant Company, LLC and is geolocated in Singapore. No SSL certificate is presented, indicating that the site is served only over HTTP. The only visible metadata is the page title “Little Pepe Presale | LILPEPE Token”, which suggests a cryptocurrency‑related offering but provides no further context. The domain is listed on five public security blocklists and is actively blocked by PhishDestroy, ScamSniffer, Polkadot, Enkrypt and Codeesura, reinforcing its classification as a malicious resource. VirusTotal analysis shows that six of ninety‑three scanning engines returned a detection for the domain, confirming that multiple independent tools consider it suspicious.

AlienVault OTX reports a single threat‑intel pulse referencing the domain, further corroborating its presence in threat‑sharing feeds. The authoritative nameservers are “1‑you.njalla.no”, “2‑can.njalla.in” and “3‑get.njalla.fo”, which are commonly associated with privacy‑focused hosting services. The current operational status is offline, which may be temporary or an intentional takedown. Based on the available evidence, defenders can be confident that liitlpepe.com has been used for a phishing campaign targeting users interested in a “LILPEPE” token presale.

However, the lack of a captured payload, URL paths, or observed victim interaction leaves the exact phishing vector undefined. Monitoring should continue for any re‑appearance of the domain or related subdomains, and any inbound connections to 149.28.147.41 should be logged and blocked. Organizations should update web‑filter and DNS blocklists with the domain and its associated nameservers, and consider adding the IP address to reputation‑based deny lists.