get-pengu[.]click

The domain get-pengu.click is a cryptocurrency phishing site engaged in brand impersonation targeting Solana users. It presented itself as a promotional page for Pudgy Penguins, using the page title 'Claim Your $PENGU | Pudgy Penguins' to lure victims into interacting with fraudulent crypto offers. No drainer kit was identified, but the site posed an elevated risk for cryptocurrency theft through brand impersonation. As of analysis, get-pengu.click has been taken offline, though it previously operated as an active phishing scam.

Technical indicators confirm the malicious nature of get-pengu.click. The domain was flagged by 2 of 95 VirusTotal security vendors, including alphaMountain.ai and Fortinet, while appearing on 1 security blocklist (PhishDestroy). It was created on February 21, 2026, and resolved to the IP address 104.21.93.166, hosted on Cloudflare's infrastructure (AS13335) in the US. The SSL certificate was issued by WE1, and the site held a Gridinsoft trust score of 0/100. Google Safe Browsing did not flag the domain at the time of assessment.

Victims of get-pengu.click should immediately revoke any token approvals granted to unknown contracts and transfer remaining funds to a new wallet. If credentials were entered, users should change passwords for associated accounts and enable two-factor authentication. The domain can be reported to platforms like PhishTank, Google Safe Browsing, or the impersonated brand (Solana) for further investigation and takedown efforts.