amlpepe[.]icu

Analysis of the domain amlpepe.icu indicates that it was registered on 22 March 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com. The authoritative nameservers dayana.ns.cloudflare.com and ishaan.ns.cloudflare.com resolve the domain to the Cloudflare edge address 172.67.211.232, which is geolocated to California, United States, and is associated with Cloudflare, Inc. The site presents the generic Cloudflare challenge page titled “Attention Required! | Cloudflare”, and no SSL certificate is observed beyond the default Cloudflare edge certificate. Technical fingerprints show the use of Cloudflare Browser Insights and HTTP/3, confirming that the infrastructure relies on Cloudflare’s CDN and security services. Threat intelligence flags the domain as a crypto‑related scam.

Four of ninety‑four VirusTotal scanners have raised alerts, and the domain is listed on a single external blocklist. Gridinsoft assigns a trust score of zero out of one hundred, and the phishing‑specific blocklist PhishDestroy has already taken the site offline. The combination of a recent registration date, use of a reputable CDN, and minimal detection coverage suggests a short‑lived malicious campaign that leveraged Cloudflare’s anonymity to host a phishing landing page. Uncertainties remain regarding the exact payload or credential‑harvesting mechanism, as the content behind the Cloudflare challenge has not been captured. No additional indicators such as malicious binaries, phishing kits, or victim reports have been disclosed.

Consequently, defenders cannot attribute the domain to a broader campaign or link it to known threat actors beyond the generic crypto‑scam categorisation. Defenders should add the IP address 172.67.211.232 to watchlists, monitor DNS queries for the domain and its Cloudflare nameservers, and enforce block rules for any HTTP requests that resolve to this host.