peaqairdrop[.]online

The domain peaqairdrop.online was registered on February 21 2026 and currently returns an HTTP response indicating the site is offline. Passive DNS records show resolution to the IP address 188.114.97.3, which is owned by Cloudflare, Inc. (AS13335) and geolocated to the United States. The TLS certificate presented is identified as WE1, but no additional certificate attributes have been disclosed. The page title retrieved from the site before it was taken down reads “Peaq Airdrop”, and the infrastructure is associated with a known “Airdrop Scam” phishing kit that targets cryptocurrency users.

The kit is classified as a crypto‑scam and the campaign masquerades as the messaging platform Telegram, as indicated by the “impersonates: telegram” tag. Reputation services have assigned a Gridinsoft trust score of 0 out of 100, reflecting an extremely low confidence rating. VirusTotal analysis shows that one of ninety‑three scanning engines flagged the domain, confirming the presence of malicious activity. The domain is listed on a single security blocklist, where it is recorded as blocked by PhishDestroy.

No further intelligence such as additional blocklist entries, Safe Browsing alerts, or Open Threat Exchange (OTX) references are available. At present the primary unknowns are the exact content that was hosted before takedown and whether any credential harvesting or transaction redirection mechanisms were operational. Defenders should continue to monitor the IP address 188.114.97.3 for any re‑use of the host by similar phishing infrastructure, enforce blocklist rules that include peaqairdrop.online, and consider adding the domain to internal deny lists for email and web filtering. Additional investigation of the associated phishing kit may yield indicators of compromise that can be shared with upstream threat‑intelligence feeds.