pudgypenguins-co[.]pages[.]dev

The domain pudgypenguins-co.pages.dev was created on February 21, 2026 and is currently listed as offline. Infrastructure analysis shows the domain is hosted on Cloudflare’s network, resolving to IP address 172.66.44.93, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. DNS records list arya.ns.cloudflare.com and will.ns.cloudflare.com as authoritative nameservers, confirming the Cloudflare registration. The site presented a TLS certificate issued by Google Trust Services under the WE1 identifier, indicating a valid HTTPS endpoint despite the malicious intent.

An HTTP GET request returns a 403 status code, suggesting the content is being actively blocked or removed. The page title retrieved from the host is "Decentralised," and the reported scam type is brand impersonation targeting the "across" brand. Threat intelligence indicates the domain appears on three security blocklists and has been actively blocked by PhishDestroy, MetaMask, and SEAL. VirusTotal scans show two of ninety‑three security vendors flagged the domain, reinforcing the suspicion.

Gridinsoft assigned a trust score of zero out of one hundred, further confirming its malicious nature. Defenders should continue to monitor the domain’s resolution and blocklist status, ensure that any residual DNS entries are scrubbed from internal resolvers, and propagate the indicator of compromise (IOC) – including the fully qualified domain name, IP address, and associated nameservers – across phishing prevention tools. Given the elevated risk rating, organizations should consider adding the domain to web filtering policies and educate users about the potential brand‑impersonation tactic associated with the "across" brand.