penniefoundation[.]com

The domain penniefoundation.com is a phishing site engaged in brand impersonation, specifically targeting victims through an NFT scam under the guise of a foundation. It does not employ a known crypto drainer kit but operates as a fraudulent platform designed to deceive users into transferring digital assets or sensitive information. As of the latest verification, penniefoundation.com has been taken offline, though its prior activity remains a confirmed threat.

Technical indicators confirm the elevated risk posed by penniefoundation.com. The domain was flagged by 1 of 95 VirusTotal security vendors and appears on 1 security blocklist (PhishDestroy). Registered through Wix.Com Ltd. on January 18, 2025, it resolved to the IP address 34.149.87.45, hosted on Google Cloud infrastructure (AS396982). The SSL certificate was issued by Google Trust Services / WR1, and the observed page title was 'Home | Pennie Foundation'. Technologies detected include Wix, React, Google Cloud CDN, and HSTS. MX records point to Google’s mail servers, and nameservers are ns12.wixdns.net and ns13.wixdns.net. Google Safe Browsing did not flag the domain at the time of assessment.

Victims of penniefoundation.com should immediately revoke any token approvals granted to unknown contracts and transfer remaining funds to a new, secure wallet. If credentials were entered, change passwords for all associated accounts and enable multi-factor authentication. Report the phishing domain to platforms such as Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group (APWG). Additionally, notify the impersonated brand’s security team to aid in broader mitigation efforts.