peakonbase[.]lol

Analysis of peakonbase.lol indicates that the domain was registered on June 08, 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com. Within a month of its creation it has been classified as a generic phishing site and assigned a high risk rating. The domain appears on three independent security blocklists and is actively blocked by the PhishDestroy, MetaMask, and SEAL filtering solutions. Google Safe Browsing has flagged the site for social engineering, confirming that the URL is associated with deceptive credential‑collection tactics.

VirusTotal scans show that 14 of 91 security vendors have raised a detection, reinforcing the suspicion that the domain is being used for malicious purposes. The presence on multiple blocklists, combined with the Safe Browsing label, demonstrates a consensus among disparate intelligence sources that the site is not trustworthy. Infrastructure details such as hosting IP, ASN, geographic location, TLS certificate information, HTTP response codes, or page title have not been published in the current intelligence feed, leaving those aspects of the operation unverified. Absence of this data limits the ability to map the full command‑and‑control infrastructure or to attribute the campaign to a specific actor, but the existing evidence is sufficient to treat the domain as hostile.

Defenders are advised to add peakonbase.lol to deny‑list rules across web proxies, DNS filtering services, and endpoint protection platforms. Continuous monitoring of the domain’s resolution and any future enrichments—such as observed IP addresses, certificate fingerprints, or page content—should be incorporated into threat‑intel feeds. Organizations that employ credential‑based authentication should be reminded to verify URLs before entering credentials, especially for newly created domains that quickly appear on phishing blocklists. Given the active status and high risk rating, immediate remediation is recommended.