claim-pudgeypenguins[.]com

Analysis of the domain claim-pudgeypenguins.com indicates it is an active crypto drainer site, classified as a high-risk threat. The domain was registered on February 21, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com and currently resolves to the IP address 172.67.195.153, hosted on AS13335 (Cloudflare, Inc.) in the United States. Infrastructure analysis reveals Cloudflare nameservers (brianna.ns.cloudflare.com and weston.ns.cloudflare.com) and an SSL certificate issued by Google Trust Services (WE1). The domain is flagged by one security blocklist and has a trust score of 0/100. VirusTotal detections show 2 of 93 security vendors marking it as malicious, though the specific nature of these detections is not detailed in available intelligence. The page title, 'Just a moment...', suggests the site may employ anti-analysis or cloaking techniques, a common tactic in crypto drainer operations to evade automated scanning. No further content analysis has been conducted, so the exact mechanics of the drainer or its targeting methods remain unconfirmed. Defenders should treat this domain as an active threat. Blocking the domain and its resolving IP (172.67.195.153) at the network level is recommended. Given the use of Cloudflare infrastructure, monitoring for additional domains resolving to the same IP or nameservers may help identify related malicious activity. No brand impersonation or specific victim targeting has been confirmed beyond the crypto scam classification.