little-pepe[.]com

Analysis of little-pepe.com indicates a phishing domain targeting users through a purported collectibles platform. The domain was registered on August 4, 2025, via Web Commerce Communications Limited and is currently offline as of the report date. Infrastructure analysis reveals hosting behind Cloudflare (AS13335, US), resolving to IP 188.114.96.3. The site employed Cloudflare services, including Browser Insights and HTTP/3, alongside tracking technologies such as Google Analytics and Facebook Pixel, suggesting an attempt to monitor user interactions or gather analytics for malicious purposes.

The SSL certificate, issued by Google Trust Services (WE1), does not mitigate the domain's risk, as phishing sites commonly use valid certificates to appear legitimate. The page title, 'Little Pepe - Cute Collectibles,' implies a focus on collectibles, though no specific brand impersonation is confirmed in available data. Detection metrics are limited but indicative of malicious activity: the domain appears on one security blocklist, and Gridinsoft assigns a trust score of 0/100. VirusTotal shows a single detection from 95 vendors, though this alone does not confirm the full scope of malicious intent.

Defenders should treat this domain as a confirmed phishing threat, particularly for users engaged in collectibles or e-commerce. Recommended actions include blocking the domain and associated IP, monitoring for related infrastructure (e.g., Cloudflare-hosted subdomains), and alerting users to potential fraudulent collectibles schemes. Further investigation into the domain's historical content and traffic patterns is advised to identify additional indicators of compromise.