Pemeriksaan phishing dan keamanan claimpengu.app

Analysis of the domain claimpengu.app indicates it was actively involved in a crypto drainer scam targeting users of the Pudgy Penguins brand, as evidenced by the page title 'Claim Your $PENGU | Pudgy Penguins.' The domain was registered on March 23, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with high-risk domains. Infrastructure analysis reveals the domain resolved to the IP address 188.114.96.3, located in Canada and hosted under Cloudflare, Inc., with nameservers alaric.ns.cloudflare.com and sima.ns.cloudflare.com. No SSL certificate was detected, increasing the risk of unencrypted data transmission. Detection data from multiple security vendors confirms the malicious nature of this domain.

As of the report date, 18 out of 94 security vendors on VirusTotal flagged claimpengu.app as malicious. The domain appears on four security blocklists and is explicitly blocked by PhishDestroy, MetaMask, ScamSniffer, and SEAL, all of which specialize in cryptocurrency-related threats. Google Safe Browsing classified the domain under 'social engineering,' further supporting its association with fraudulent activity. Gridinsoft assigned a trust score of 0/100, indicating a complete lack of credibility.

Technologies detected on the domain include HSTS, Cloudflare Browser Insights, and HTTP/3, suggesting the use of modern web infrastructure to evade detection or enhance performance. The domain was taken offline prior to this analysis, though defenders should remain vigilant for potential re-emergence under similar infrastructure or registration patterns. Given the high-risk classification and the specific targeting of cryptocurrency users, organizations and individuals are advised to block access to this domain and monitor for related indicators of compromise. No further details about the exact mechanics of the crypto drainer or victim interactions are available at this time.