pudgy-test[.]glitchy[.]team

Analysis on pudgy-test.glitchy.team indicates that the domain was registered through NameCheap, Inc. on March 03 2026 and immediately pointed to Cloudflare’s network (ASN 13335) at IP 172.67.215.25 located in the United States. The authoritative nameservers are tony.ns.cloudflare.com and haley.ns.cloudflare.com, confirming the use of Cloudflare’s DNS service. TLS termination is provided by a Google Trust Services certificate issued to "WE1", and the site serves over HTTP/3. An HTTP request returns a 403 status code, and the page title reported by crawlers is "Pudgy".

VirusTotal records a single positive detection out of 94 scanning engines, and Gridinsoft assigns a trust score of 0 / 100. The domain is listed on three public blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL. Current monitoring shows the host is offline, consistent with the "taken offline" status in the feed. Evidence points to a generic phishing infrastructure rather than a targeted brand impersonation, as no brand name appears in the page title or other collected metadata.

The low trust score, presence on multiple blocklists, and the single vendor flag suggest that the site has been identified as malicious, but limited scanning coverage leaves some uncertainty about the specific payload or credential‑harvesting techniques employed. Defenders should continue to block the domain at network perimeter and DNS filtering layers, ensure that any existing host‑based or web‑gateway rules referencing Cloudflare‑served malicious domains are updated, and monitor for any re‑registration of the same second‑level domain or similar subdomains. Additional investigation of the single VirusTotal detection may reveal the underlying phishing kit, and analysts should verify whether the 403 response is a deliberate deterrent or a result of takedown actions. Ongoing observation of the associated IP address is advised, as the same Cloudflare edge could serve other malicious sites in the future.