pudgyweb[.]com

Analysis of pudgyweb.com shows a newly registered domain created on February 21, 2026 and hosted by NameCheap, Inc. The domain resolves to IP 91.92.242.155, which is assigned to AS202412 Omegatech LTD in the Netherlands. The site is fronted by Cloudflare, utilizes Tailwind CSS and HTTP/3, and presents a TLS certificate issued by Let’s Encrypt (certificate identifier E7). The page title returned by the server is "Home | Jupiter" and the HTTP response code is 200, indicating the site was reachable before being taken offline.

Security intelligence places the domain on two blocklists, specifically PhishDestroy and ScamSniffer, and it appears on two additional security blocklists referenced in the data set. VirusTotal scans have flagged the domain by 13 of 93 security vendors, reinforcing the suspicion of malicious activity. The domain is explicitly listed as a brand‑impersonation campaign targeting Discord, and the overall risk rating is elevated.

While the technical infrastructure—hosting, DNS, and TLS—is well documented, the exact content of the landing page and any credential‑harvesting mechanisms have not been disclosed, leaving the payload details uncertain. Defenders should block traffic to pudgyweb.com at the network perimeter, add the domain to URL filtering and endpoint allow‑list exclusions, and monitor DNS queries for the associated Cloudflare nameservers (eric.ns.cloudflare.com, joan.ns.cloudflare.com). Given the association with known blocklists and multiple vendor detections, any user‑initiated connections to this domain should be treated as malicious, and incident response teams should investigate any logs containing accesses to the IP address 91.92.242.155 or the domain name for potential compromise of Discord credentials.