peaqportal[.]app

Analysis of the domain peaqportal.app, assessed on July 22, 2026, confirms its classification as a brand-impersonation phishing site targeting Discord. The domain, registered through Cloudflare, Inc., currently resolves to the IPv6 address 2606:4700:3031::ac43:ba1e, hosted on Cloudflare's infrastructure (AS13335) in the United States. No SSL certificate is present, increasing the risk of unencrypted data interception. The domain's nameservers, bruce.ns.cloudflare.com and nena.ns.cloudflare.com, further link it to Cloudflare's DNS services.

The site is flagged on four security blocklists, including PhishDestroy, Polkadot, Enkrypt, and Codeesura, indicating prior detection by multiple threat intelligence sources. Gridinsoft assigns a trust score of 0/100, reflecting a high level of suspicion. While VirusTotal data is limited, two of 95 security vendors have flagged the domain, though this does not constitute conclusive evidence of malicious activity. The page title, 'peaq | Powering DePIN and the Machine Economy,' does not directly reference Discord, but the domain's classification as a brand-impersonation scam aligns with its targeting of Discord users.

Infrastructure analysis reveals the domain was taken offline at the time of assessment, though its prior activity remains a concern. Defenders should treat this domain as a confirmed phishing threat, particularly in environments where Discord credentials or interactions are critical. Organizations are advised to block the domain and its associated IP address at the network level and monitor for related indicators of compromise. Further investigation into the domain's historical content and potential credential-harvesting mechanisms is recommended, though no specific phishing kit or payload has been identified in the available data.