claim-pengu[.]xyz

The domain claim-pengu.xyz is associated with a generic phishing operation and has a high threat score of 85/100. The site is currently down, indicating it has likely been taken down due to its malicious activities. VirusTotal reports that 4 out of 95 security vendors have flagged this domain, including recognizable names such as Forcepoint ThreatSeeker and Gridinsoft, while it appears on 3 public blocklists. Notably, Google Safe Browsing has not flagged this domain.

Registrar information is not available, suggesting potential use of privacy protection. The domain was created on 2026-02-21 and first detected on 2026-02-26, indicating it is relatively new. Immediate action is required: block the domain at the perimeter and monitor the associated IP address, 104.21.26.93, as an indicator of compromise.