# event-pengu.app — SUSPICIOUS

> event-pengu.app is a live crypto drainer site with 0/95 VirusTotal detections. Avoid clicking any wallet connections—it mimics a fake event portal.

## Summary
PhishDestroy identifies event-pengu.app as an active crypto drainer posing as a legitimate event portal. This domain, registered on March 26, 2026, resolves to IP 188.114.97.3 and leverages a Let’s Encrypt SSL certificate for deceptive legitimacy. The site currently shows zero detections on VirusTotal (0/95 engines), indicating a newly emerged threat still under the radar of most security tools.  This domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar known for hosting fraudulent infrastructure, and its recent creation date suggests a targeted campaign rather than a long-standing operation. Crypto drainers like event-pengu.app are designed to trick users into connecting their wallets, whereupon malicious scripts siphon digital assets under the guise of legitimate transactions. The absence of blocklist detections—paired with its SSL certificate—makes it particularly dangerous, as users may lower their guard when seeing the padlock icon.  If you visited event-pengu.app, immediately revoke any wallet connections via your wallet provider’s settings and disconnect the site from your browser. Monitor your transaction history for unauthorized transfers and report suspicious activity to your wallet’s support team. Use ad-blockers with anti-phishing filters (e.g., uBlock Origin’s EasyList) and avoid clicking unsolicited links promising exclusive events or giveaways. Deploy hardware wallets for critical assets and enable multi-factor authentication where possible to mitigate future risks.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-26 01:46:47
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/9233bc6a-9903-431c-8046-1c708b867a70
- PhishDestroy: https://phishdestroy.io/domain/event-pengu.app/
- LLM endpoint: https://phishdestroy.io/domain/event-pengu.app/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/event-pengu.app/
Last updated: 2026-03-26