pudgypeng[.]us

The domain pudgypeng.us was registered on 26 April 2026 through NameSilo, LLC. It is currently classified as a credential phishing site targeting users seeking cryptocurrency rewards, as indicated by the page title “PENGU Bonus and Rewards”. The domain is active as of 12 July 2026 and carries a high risk rating.

Infrastructure analysis reveals that pudgypeng.us resolves to the Cloudflare edge address 188.114.96.3, which is geolocated to Canada and served by the Cloudflare, Inc. network. The authoritative nameservers are jeremy.ns.cloudflare.com and nataly.ns.cloudflare.com. The site presents a valid SSL certificate issued by Google Trust Services under the WE1 root, yet HTTP requests return a 403 status code, suggesting intentional access restriction for casual browsers.

Reputation data shows the domain appears on three security blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL. A Gridinsoft trust score of 0 out of 100 further confirms its malicious nature. VirusTotal analysis records three of ninety‑five security vendors flagging the domain, consistent with a low‑visibility but targeted phishing campaign. The combination of a credible SSL certificate, Cloudflare hosting, and a misleading reward‑oriented page title is typical of credential harvesting operations.

Defenders should block network resolution to 188.114.96.3 and add pudgypeng.us to local and upstream blocklists. Email filtering rules should be updated to detect the “PENGU Bonus and Rewards” phrase and similar lure language. Continuous monitoring of the associated nameservers and any newly observed IPs in the Cloudflare range is advised, as the operator may shift hosting while retaining the same domain registration.