penguin-community[.]fun
“Penguin Airdrop.”
Resumen de las pruebas
The domain penguin-community.fun is a cryptocurrency phishing site that impersonates a generic 'Penguin Airdrop' to deceive users into disclosing wallet credentials or transferring funds. It does not mimic a known brand or deploy a recognized drainer kit. The site is currently taken offline, but it previously posed an elevated risk of financial theft.
Technical indicators confirm penguin-community.fun was flagged by 2 of 95 VirusTotal security vendors, including SOCRadar and URLQuery. The domain was registered through PDR Ltd. d/b/a PublicDomainRegistry.com on February 21, 2026, and resolved to the IP address 104.21.31.78, hosted on Cloudflare's US network (AS13335). It appeared on three security blocklists: PhishDestroy, MetaMask, and SEAL. No SSL certificate was issued, and the observed page title was 'Penguin Airdrop.' Nameservers were joan.ns.cloudflare.com and lou.ns.cloudflare.com.
Users who interacted with penguin-community.fun should immediately revoke any token approvals granted to unknown contracts and transfer remaining funds to a new wallet. Enable two-factor authentication on all accounts and monitor transaction histories for unauthorized activity. Report the domain to platforms like Google Safe Browsing, PhishTank, or local cybercrime units to aid in takedown efforts.
Instantánea de evidencia enviada
- Enviado
- Registros del libro
- 1
- ID del caso
PD-20260218-4247A4- Título de la página capturada
- Penguin Airdrop.
- Artefacto PDF
- Evidencia en PDF
Fundamento jurídico
Texto completo de la evidencia
Acceptable Use Policy (AUP): The domain penguin-community.fun is engaged in phishing activities, which constitutes a direct violation of your AUP prohibiting illegal activities and fraud.
Terms of Service (TOS): The continued operation of this domain violates your TOS, which reserves the right to suspend or terminate services for any activities that involve deception or fraud.
Applicable Laws (Unknown):
Computer Fraud and Abuse Act (CFAA): This U.S. law prohibits unauthorized access to computers and the use of fraudulent schemes to obtain information.
Wire Fraud Statute (18 U.S.C. § 1343): This law criminalizes any scheme to defraud another person or entity via electronic communications.
CAN-SPAM Act (15 U.S.C. § 7701): This act regulates commercial email and prohibits deceptive practices in electronic communications.
Regulatory Note: Failure to take immediate action against this domain may expose your organization to liability under applicable laws and regulations. Non-compliance could result in regulatory scrutiny and potential penalties.
Data Coverage
Inteligencia de seguridad de red
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Private YARA rules | sm8zbc.vercel.app/demo.php?antibot=false&id=699619cbefb69f3af62700cd&parent_url=penguin-community.fun%2f&source=solana-iframe |
audit | Hunting_JS_WebAssembly |
Proceso de respuesta ante amenazas Pipeline
Cobertura de listas de bloqueo
10 fuentes externas supervisadas · instantánea del 12/08/2026
8 fuentes externas supervisadas Sin coincidencias
Cronología de detección
-
Cloudflare Radar
Análisis de Cloudflare Radar almacenado · Abrir análisis
Captura guardada
Inteligencia de dominios
Detalles técnicosDNS, nombres TLS y marcas de tiempo
ICANN OVERSIGHT
Acreditación y contexto RAA
Acreditación y contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Análisis de VirusTotal
¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.