peaqclaim[.]live

The domain peaqclaim.live is currently active and classified as a high‑risk crypto drainer. The site returns HTTP status code 403 and presents the page title “Nur einen Moment…”. Registration occurred on 27 November 2025 through NiceNIC International Group Co., Limited. The domain’s risk rating is reinforced by a Gridinsoft trust score of 0 out of 100. Infrastructure analysis shows the domain resolves to the IP address 188.114.96.3, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. Both authoritative name servers, lee.ns.cloudflare.com and adelaide.ns.cloudflare.com, resolve to Cloudflare’s network, and the service presents Cloudflare Browser Insights and HTTP/3 support. The TLS certificate is issued by Google Trust Services under the WE1 root, indicating a valid certificate chain despite malicious use. Reputation signals are strongly negative. VirusTotal records three detections out of ninety‑five scanning engines, and the domain appears on five independent blocklists, including PhishDestroy, ScamSniffer, Polkadot, Enkrypt and Codeesura. The low Gridinsoft score and the presence on multiple blocklists corroborate the classification as a cryptocurrency‑draining scam. Defenders should block the domain at network perimeter and endpoint filters, monitor DNS queries for the associated IP and name servers, and enforce TLS inspection to capture any attempted communications. Because the site leverages Cloudflare’s infrastructure, legitimate traffic to Cloudflare may be affected; use domain‑based allowlists to limit impact. Continuous threat‑intel feeds should be consulted for any emerging indicators, and compromised credentials should be assumed if users report interactions with the “Nur einen Moment…” page.