pengudao[.]com

Analysis of the domain pengudao.com indicates it is currently active and under investigation for generic phishing activity. Registered on April 24, 2026, through NameSilo, LLC, the domain resolves to the IP address 188.114.97.3, which is associated with Cloudflare infrastructure, as further evidenced by its nameservers (penny.ns.cloudflare.com and scott.ns.cloudflare.com). While VirusTotal scans conducted by 95 vendors show no current detections, this absence does not confirm the domain's safety, as phishing domains often evade initial detection. The domain appears on one security blocklist, and AlienVault OTX has included it in a threat intelligence pulse, suggesting prior identification in malicious contexts.

Infrastructure analysis reveals reliance on Cloudflare, a common tactic among phishing operators to obscure hosting origins and leverage CDN protections. The domain's registration age (approximately three months at the time of this report) aligns with typical phishing lifecycle patterns, where domains are often short-lived. No specific brand impersonation or scam category has been confirmed in available data, and the exact content of the site remains unanalyzed.

Defenders are advised to monitor the domain for further detections, particularly given its presence on a security blocklist and inclusion in threat intelligence feeds. Network-level blocking may be warranted for organizations with elevated risk profiles, pending additional evidence of malicious activity. Continuous reassessment is recommended as new intelligence emerges.