pudgy-penguins[.]co

The domain pudgy-penguins.co is a high-risk generic phishing site with no association to any legitimate brand. It was designed to harvest user credentials or sensitive information through deceptive login prompts or forms, posing a direct threat to visitors. As of the latest verification, pudgy-penguins.co has been taken offline, but it remains a documented phishing domain with confirmed malicious activity.

Technical indicators confirm the domain's malicious nature. pudgy-penguins.co was flagged by 14 of 95 VirusTotal security vendors, including ADMINUSLabs, ChainPatrol, and alphaMountain.ai. It appears on four security blocklists: PhishDestroy, Polkadot, Enkrypt, and Codeesura. The domain was created on February 21, 2026, and resolved to the IP address 195.177.94.226, hosted on AS214961 Stellar Group SAS in France. The SSL certificate was issued by R11, and the observed page title was 'Plesk Obsidian 18.0.71'. Gridinsoft assigned a trust score of 0 out of 100, further indicating its fraudulent purpose.

Users who interacted with pudgy-penguins.co should immediately change any passwords or credentials entered on the site, enable two-factor authentication (2FA) on all accounts, and monitor for unauthorized access or fraudulent transactions. If financial or cryptocurrency details were exposed, consider revoking token approvals and transferring funds to a new wallet. Report the domain to relevant authorities or platforms, such as Google Safe Browsing, anti-phishing organizations, or local cybercrime units, to help prevent further abuse.