penguin-community-fun-122bd1[.]pages[.]dev

Analysis of penguin-community-fun-122bd1.pages.dev shows a newly created domain (registered 18 Feb 2026) hosting a page titled “Penguin Airdrop.” The site resolves to IP 188.114.96.3, an address owned by Cloudflare, Inc. (AS13335) and is physically located in the United States. The domain uses a Let’s Encrypt certificate (CN=YE1), enforces HSTS, and serves content over HTTP/3 via Cloudflare’s edge network. An HTTP 200 response is returned for the landing page, and the site has been flagged by the PhishDestroy blocklist for employing the “Airdrop Scam” phishing kit, consistent with the “Fake Airdrop” classification. The infrastructure is currently active and appears on a single security blocklist; Gridinsoft assigns it a trust score of 0/100. No malware detections are recorded on VirusTotal, but the absence of alerts does not imply safety. While the page title is the only visible artifact, the underlying content has not been publicly examined, leaving the exact lures and credential‑capture mechanisms unknown. Defenders should block the domain at network perimeter, add it to host‑based deny lists, and monitor DNS queries for the associated IP range. Users should be warned that unsolicited airdrop offers linked to this domain are likely malicious and that any credential entry should be avoided.