pfp-pepe[.]fun

The domain pfp-pepe.fun is a generic phishing site designed to deceive users into disclosing sensitive information. It does not impersonate a specific brand or utilize a known drainer kit. As of the latest verification, pfp-pepe.fun has been taken offline, but it previously posed an elevated risk of credential theft or other fraudulent activity.

Technical analysis of pfp-pepe.fun reveals limited but notable detection. The domain was flagged by 3 of 95 security vendors on VirusTotal, including Fortinet, Gridinsoft, and SOCRadar, while Google Safe Browsing did not flag it. It appeared on 1 security blocklist, PhishDestroy, and had a Gridinsoft trust score of 0 out of 100. Registered through NiceNIC International Group Co., Limited on December 04, 2025, pfp-pepe.fun resolved to the IP address 104.21.62.49, hosted on Cloudflare's network (AS13335). No SSL certificate was present, and the domain's nameservers were garret.ns.cloudflare.com and kay.ns.cloudflare.com. The site returned an HTTP 530 status code before being taken offline.

Users who interacted with pfp-pepe.fun should immediately change any passwords or credentials entered on the site, enable two-factor authentication on all accounts, and monitor for unauthorized access or fraudulent transactions. If financial or cryptocurrency details were exposed, consider revoking token approvals and transferring funds to a new wallet. Report the domain to platforms like Google Safe Browsing, PhishTank, or local cybersecurity authorities to aid in broader mitigation efforts.