pegecoinsol[.]co

The domain pegecoinsol.co was registered on 21 February 2026 and is currently active. DNS resolution points to the IPv6 address 2606:4700:3030::6815:5001, which is owned by Cloudflare, Inc. (AS13335) and geolocated to the United States. An SSL certificate identified as WE1 is presented, and the web server returns HTTP 200 for the root page. The page title returned by the server is “PEGE – America’s Digital Mascot”, which aligns with the declared brand‑target “across” and the listed scam type “Wallet/Seed Phishing”.

The site is listed on a single security blocklist and has been flagged by the PhishDestroy blocking service. Reputation scoring from Gridinsoft assigns a trust score of 0 out of 100, indicating a complete lack of confidence in the host. VirusTotal analysis shows that 6 of 93 scanned security vendors label the domain as malicious, confirming the presence of at least one known payload or behavior. AlienVault OTX references the domain in one threat‑intel pulse, further corroborating its association with malicious activity.

The combination of a newly created domain, low trust score, active blocklist entries, and multiple vendor detections suggests a high‑confidence phishing operation aimed at harvesting cryptocurrency wallets or seed phrases. However, the exact phishing workflow, credential‑capture mechanisms, and any downstream command‑and‑control infrastructure have not been publicly disclosed. Defenders should add pegecoinsol.co to URL filtering and DNS sink‑hole policies, block the associated IPv6 address at the network perimeter, and monitor for any outbound connections to Cloudflare‑hosted services that may be used for payload delivery. Continuous re‑scanning with VirusTotal and integration of OTX pulse updates are recommended to capture any evolution in the threat profile.