pudgyrewards[.]com

This domain, pudgyrewards.com, is actively operating as a crypto drainer phishing site designed to steal cryptocurrency credentials and assets through deceptive reward offers. Analysis indicates the infrastructure is currently live, with no legitimate association to any known brand or service. The site employs social engineering tactics to trick users into connecting wallets, subsequently draining funds via malicious smart contracts. Infrastructure analysis reveals the domain was registered on February 21, 2026, through MAT BAO CORPORATION, a registrar frequently utilized for high-risk domains. It resolves to the IP address 104.21.64.127, hosted on Cloudflare’s network (AS13335), which is commonly exploited to obfuscate malicious activity. The domain is flagged by 9 of 95 security vendors on VirusTotal, including detections from multiple threat intelligence feeds. Additionally, it appears on two security blocklists and is explicitly blocked by at least two specialized anti-phishing tools. The SSL certificate is issued by Google Trust Services (WE1), a legitimate provider often leveraged to lend false credibility to phishing sites. The domain remains active and poses an elevated risk to users encountering fraudulent reward promotions. Organizations and individuals are advised to block the domain and its resolving IP at the network level. End users should avoid interacting with any content from pudgyrewards.com, particularly requests to connect cryptocurrency wallets. Security teams are recommended to monitor for related domains registered under the same registrar or resolving to the same IP range, as this infrastructure may be reused for additional phishing campaigns.