meta-x-penguins[.]sbs

Analysis indicates that the domain meta-x-penguins.sbs is currently active and has been identified as a generic phishing campaign. The domain resolves to Cloudflare name servers elaine.ns.cloudflare.com and owen.ns.cloudflare.com, suggesting the use of Cloudflare’s DNS infrastructure to obscure the origin of the hosting. Registration was performed through Dynadot Inc, a registrar that is frequently used by malicious operators because it offers rapid domain provisioning. HTTP requests to the site return a 403 status code, which is consistent with a deliberately restricted response that may be used to evade automated crawling while still serving malicious content to targeted users.

The domain is listed on a single security blocklist and has been flagged by the PhishDestroy blocklist, confirming that at least one reputable anti‑phishing feed is actively blocking it. VirusTotal analysis shows that 4 of 91 scanned security vendors have raised detections on the domain, indicating that multiple independent scanners have observed malicious indicators associated with the host. The relatively low detection count may reflect limited exposure or recent deployment, but the presence of any positive detections reinforces the classification as a high‑risk phishing asset. No additional reputation scores, Safe Browsing verdicts, or public threat‑intel tags are available in the current data set, leaving the broader ecosystem visibility incomplete.

Defenders should continue to enforce blocklist rules that include meta-x-penguins.sbs, ensure that DNS filtering solutions deny both the domain and its associated Cloudflare name servers, and monitor for any new indicators such as IP address resolution changes or increased detection counts on VirusTotal. Because the site returns a 403 response, any attempts to retrieve the page content should be treated as suspect and logged for further forensic analysis.