pengzabstract[.]xyz

Analysis of pengzabstract.xyz shows registration on April 12, 2026 through Namecheap with nameservers ns1.vercel-dns.com and ns2.vercel-dns.com. The domain resolves to IP address 216.198.79.65 located in the US under CYPRESS COMMUNICATIONS, LLC. It employs SSL certificate from Let's Encrypt R13 and returns HTTP status 307 while indicating use of Vercel and HSTS. The domain was created several months prior to the report date of July 12, 2026 yet remains listed with active resolution and no indication of takedown.

This domain appears on one security blocklist operated by PhishDestroy and maintains an active status. VirusTotal reports flags from 7 out of 95 security vendors with Gridinsoft assigning a trust score of 0 out of 100. The page title is PENGZ and the associated threat type is generic phishing with high risk level. Infrastructure analysis reveals hosting configuration consistent with Vercel deployment patterns combined with strict transport security headers.

What remains uncertain includes the full extent of any campaign reach or specific targets beyond the generic classification. No additional ASN or brand impersonation details are recorded in the available intelligence. The single blocklist presence and partial VirusTotal detections leave open questions about broader distribution across other vendors.

Defenders should monitor the IP 216.198.79.65 for related activity and consider blocking based on the existing blocklist entry. Regular checks for similar domains using the same nameservers or registrar patterns are advisable to mitigate potential spread. Continued observation of HTTP 307 redirects and page title PENGZ can support identification of any mirrored instances.