pepe-vault[.]xyz

The domain pepe-vault.xyz was registered on July 13, 2026 through NameSilo, LLC and remains active as of the report date, July 20, 2026. DNS resolution points to the single IPv4 address 35.157.26.135, hosted on Cloudflare’s network as indicated by the authoritative nameservers dale.ns.cloudflare.com and demi.ns.cloudflare.com. The domain appears on one public security blocklist, suggesting that at least one external trust feed has flagged it for malicious use. PhishDestroy has already blocked the domain, confirming its involvement in phishing operations. VirusTotal analysis shows that one out of ninety‑five scanning engines has raised a detection, providing additional vendor‑level corroboration of malicious intent. No further public intelligence—such as Safe Browsing status, OTX mentions, SSL certificate details, HTTP response codes, or page‑title content—has been disclosed for this domain. The limited but consistent evidence across registration, hosting, blocklist, and vendor detection points to a high‑risk phishing infrastructure that is actively being used. Defenders should add pepe-vault.xyz to local deny lists, enforce outbound traffic filtering to the associated IP address, and monitor for any related C2 traffic originating from Cloudflare‑hosted assets. Continuous re‑evaluation is advised, as additional detections or blocklist entries may emerge as the campaign evolves.