pudgypenguins[.]game

pudgypenguins.game was registered on 14 December 2025 through PDR Ltd. d/b/a PublicDomainRegistry.com. The domain resolves to the Amazon Web Services address 66.33.60.193, which belongs to ASN 16509 (Amazon.com, Inc.) and is geolocated in the United States. An SSL certificate identified as R13 is present, indicating a valid TLS handshake but offering no indication of legitimacy. The site presented the page title “Orange Cap” before being taken offline, and its advertised purpose is a brand‑impersonation campaign targeting Epic Games. Gridinsoft assigned a trust score of 0 out of 100, and the domain appears on a single security blocklist.

VirusTotal scans flagged the domain by nine of ninety‑three antivirus or URL‑reputation engines, and the anti‑phishing service PhishDestroy has already blocked it. The presence on a single blocklist indicates limited exposure, yet the combination of a low trust score and multiple vendor detections suggests a non‑trivial malicious intent. The domain’s short lifespan of just over a year aligns with typical phishing infrastructure turnover. Because the site is currently offline, automated crawling cannot retrieve additional content, and any credential‑harvesting mechanisms remain unverified.

Defenders should add pudgypenguins.game to domain‑blocking policies, monitor the hosting IP 66.33.60.193 for any future activity, and consider sharing the indicator with threat‑intel platforms. Security teams should also inspect traffic to the associated Amazon IP for anomalous patterns, enforce TLS inspection where possible, and verify that internal email filters block URLs containing the domain. Coordination with the registrar may be pursued to accelerate takedown if re‑hosting occurs. Continuous re‑evaluation is advised in case the infrastructure is reactivated or repurposed.