peakvision[.]ltd

The domain peakvision.ltd was registered on 2025-03-07 through TuringSign Inc. d/b/a Cosmotown and is currently hosted on the IP address 163.61.188.2. The authoritative name servers dns1.lytehosting.com, dns2.lytehosting.com, dns3.lytehosting.com, and dns4.lytehosting are all operated by Lyte Hosting, indicating that the infrastructure is provided by a commercial hosting service. VirusTotal reports that five of ninety‑one scanned security vendors have generated detections for this domain, confirming that multiple independent products consider it malicious.

The domain is listed on a single public blocklist and is actively blocked by the PhishDestroy filtering service, demonstrating that at least one dedicated anti‑phishing platform has taken mitigation steps. The threat classification is recorded as generic phishing with a high risk rating, and the domain remains active as of the report date (2026‑07‑27). No additional public intelligence such as Safe Browsing verdicts, OTX tags, SSL certificate details, or HTTP response codes is presently available, leaving the full scope of the campaign’s payload and target audience uncertain.

Analysts should therefore treat any traffic to peakvision.ltd as potentially hostile and enforce strict outbound filtering. Recommended defensive actions include adding the domain to local deny lists, confirming that existing email security gateways block messages originating from or referencing the domain, and monitoring the associated IP address for anomalous connections. Continuous re‑evaluation is advised, as further evidence may emerge from additional scanning services or threat‑intel feeds.