pudgygift[.]club

The domain pudgygift.club is identified as a brand_impersonation threat specifically targeting the Solana ecosystem. Analysis indicates the site was designed to deceive users into believing it was associated with the Pudgy Penguins project, offering fraudulent token claims under the guise of $PENGU. The domain is currently offline, but prior activity suggests it was operational for malicious purposes. Infrastructure analysis reveals several critical indicators. The domain was registered on July 25, 2025, through Web Commerce Communications Limited dba WebNic.cc. It resolved to the IP address 104.21.20.149 and was flagged by 4 of 95 security vendors on VirusTotal. Additionally, the domain appeared on one security blocklist, and its SSL certificate was issued by WE1, a provider often associated with low-trust or ephemeral domains. The page title, 'Claim Your $PENGU | Pudgy Penguins,' further confirms the intent to impersonate a legitimate token distribution event. Current status confirms the domain has been taken offline, likely due to detection and mitigation efforts. However, the infrastructure and registration patterns suggest a high likelihood of reemergence under a similar or altered domain. Users and organizations are advised to block the domain and associated IP address in network security controls. Monitoring for newly registered domains with similar naming conventions or infrastructure patterns is recommended. Solana ecosystem participants should verify token claims exclusively through official project channels and employ multi-factor authentication for all transactions.