h1[.]pekaw[.]click

This domain, h1.pekaw.click, is flagged as a generic phishing site designed to mimic a legitimate web hosting or site creation service. Analysis of the page title, 'Site is created successfully!', suggests an attempt to deceive users into believing their fraudulent site setup was successful, likely as part of a broader phishing campaign. No specific brand impersonation or crypto drainer kit signatures were identified, but the domain exhibits characteristics consistent with low-effort phishing infrastructure, such as the absence of an SSL certificate and a generic page title. Infrastructure analysis reveals the following technical indicators: the domain resolves to IP address 178.16.53.103, hosted on AS202412 (Omegatech LTD) in the Netherlands. It was registered on August 30, 2025, through Sav.com, LLC. VirusTotal detection shows 11 out of 95 security vendors flagging the domain as malicious. The domain appears on one security blocklist and is not currently listed in Google Safe Browsing (GSB). No SSL certificate is present, increasing the likelihood of interception or manipulation of user data. As of the latest assessment, h1.pekaw.click has been taken offline, reducing immediate exposure risk. However, the domain's recent creation date and the use of a known bulletproof hosting provider suggest potential for re-emergence under a similar or altered infrastructure. Organizations are advised to block the domain and its associated IP (178.16.53.103) at the perimeter. Users should verify site authenticity before entering credentials, particularly on domains with recent creation dates or lacking SSL certificates. Monitoring for related domains registered through the same registrar (Sav.com, LLC) may help preempt future threats from this actor.