peepeedrop92[.]cat

This domain, peepeedrop92.cat, is actively flagged as a high-risk crypto drainer phishing site. Infrastructure analysis reveals it was registered on April 28, 2026, through Nominalia and currently resolves to the IP address 213.158.93.73, hosted by Register.IT S.p.A. in Belgium. The domain uses nameservers dns1.nominalia.com and dns2.nominalia.com, and its SSL certificate is issued by Let’s Encrypt (R13). The HTTP response status is 302, indicating a redirect, though the destination remains unconfirmed. Detected technologies include WordPress, MySQL, PHP, and Nginx, suggesting a structured phishing framework. The site is blocked by multiple security providers, including PhishDestroy, MetaMask, and SEAL, and appears on three security blocklists. A Gridinsoft trust score of 0/100 further corroborates its malicious classification. While one of ninety-one security vendors on VirusTotal flags the domain, the exact nature of the detection is not specified. The page title, 'peepee,' provides no clear brand association, and no legitimate entity is identified in the available data. The scam type is explicitly classified as a crypto drainer, targeting users through wallet-draining mechanisms. Defenders should treat this domain as an active threat. Immediate blocking at the DNS or network level is recommended, along with monitoring for related infrastructure, such as shared IPs, nameservers, or SSL certificates. Given the domain’s recent registration and consistent security vendor detections, further investigation into its hosting provider and registrar may reveal additional linked malicious activity. No evidence suggests this is part of a broader campaign, but the infrastructure warrants scrutiny for potential reuse in future phishing operations.