peng-event[.]fun

This domain, peng-event.fun, is flagged as a brand impersonation threat targeting Revolut, leveraging a fake airdrop lure titled 'Chinese peng 企鹅 | Airdrop'. The domain was likely configured to host a drainer kit designed to steal cryptocurrency or credentials from victims expecting a legitimate Revolut airdrop. The threat type is brand impersonation, with elevated risk due to the domain's registration and infrastructure details.

Infrastructure analysis reveals exact technical indicators: VirusTotal detection rate of 3/95 security vendors flagging the domain. The domain was registered on February 21, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, and resolves to IP address 188.114.97.3. It appears on 2 security blocklists and has been blocked by ScamSniffer and PhishDestroy. Google Safe Browsing status is not explicitly provided but the domain's presence on multiple blocklists indicates active threat classification.

Current status shows the domain is offline, having been taken down following detection. Recommended response actions include monitoring for similar domains using the same IP range or registrar, and blocking the IP 188.114.97.3 at network level. Remaining risk is moderate as the domain may reappear under a different TLD or IP. Users should avoid interacting with any unsolicited airdrop offers and verify official Revolut communications through verified channels. The unique seed for this analysis is 9d8268.