penguins-activity[.]com

The domain penguins-activity.com was registered on February 21, 2026 through REALTIME REGISTER B.V. and is hosted on Cloudflare infrastructure (AS13335) with the IP address 172.67.209.127. The authoritative nameservers are deborah.ns.cloudflare.com and uriah.ns.cloudflare.com. No TLS certificate is presented, indicating the site is served over plain HTTP. The page title returned by the server is "Just a moment...", which is a generic response often associated with Cloudflare challenge pages; the actual content of the landing page has not been captured.

Threat intelligence records show the domain appears on three public blocklists and has been explicitly blocked by PhishDestroy, MetaMask, and SEAL. AlienVault OTX references the domain in a single pulse, and Gridinsoft assigns a trust score of 0 out of 100, reflecting a high confidence of malicious intent. VirusTotal analysis reports that 13 of 93 scanning engines flag the domain as malicious, providing additional corroboration of its risk profile. The current operational status is offline, preventing real‑time verification of phishing tactics or payloads.

Defenders should treat the domain as high‑risk: add it to DNS filtering rules, enforce network‑level blocks, and monitor for any re‑registration or re‑activation. Updating endpoint and gateway security signatures to include the observed indicators—such as the Cloudflare IP range, the lack of SSL, and the specific page title—will improve detection. Continuous watch‑list enrichment and coordination with the blocklist providers that have already listed the domain are recommended to maintain coverage against potential resurgence.