distribution-pengu[.]app

distribution-pengu.app is a phishing domain associated with cryptocurrency scams, flagged by 4 out of 91 vendors on VirusTotal. The domain, registered with NICENIC INTERNATIONAL GROUP CO., LIMITED, has been taken offline, reducing its immediate threat. It was also listed in three public blocklists, including PhishDestroy, MetaMask, and SEAL, indicating its recognition as a malicious entity.

The domain was hosted on IP address 172.67.208.225 and utilized SSL certification from Let's Encrypt. Its online presence was short-lived, but during its active period, it posed a significant risk to cryptocurrency users by potentially attempting to steal sensitive information or funds.

Phishing domains like distribution-pengu.app often exploit the time gap between domain registration and antivirus database updates to conduct their malicious activities. Despite its current offline status, the domain's existence highlights the ongoing threat of phishing attacks targeting the cryptocurrency sector. The proactive detection and inclusion in public blocklists demonstrate the effectiveness of early threat identification in mitigating potential damage.