Is claim-your-pengu-1.vercel.app a scam? TrustSniffer's high-risk assessment: 5/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

The website is a single-page site on a generic subdomain of a shared application-hosting platform. Its page title, "Claim Your $PENGU | Pudgy Penguins", presents it as a claim portal for the PENGU token under the Pudgy Penguins name. The apparent purpose is to prompt visitors to claim a crypto token reward. That is a lure pattern commonly used to harvest wallet access or funds, and the site shows no independent link to the brand it names.

Scam/Impersonation Risk

This assessment is clearly cautionary. Several established security vendors currently flag the site as malicious, and it is blacklisted on external threat-intelligence sources. That is a hard contradiction and it is decisive here. The brand and token named in the page title, together with the "claim your" framing, match the profile of a reward-claim lure. Nothing independent connects the site to the brand's real operators, and the generic hosting subdomain does not suggest an official property. The behavioural sandbox was more benign. In three runs the page made no external network requests, triggered no wallet-connection prompt, and showed no hidden forms, clipboard manipulation or cloaking. These observations show only that the landing page was inert during testing. They do not offset the external detections, because a malicious step can sit behind a later interaction or be swapped in later. No conflicting legal identities were found, so the identity-contradiction category does not apply. The risk rests on the external detections and the brand-lure pattern. Evidence:

• Homepage: the page title reads "Claim Your $PENGU | Pudgy Penguins", a token-claim lure tied to a third-party brand.
• Threat intelligence: 17 security engines rated the domain malicious and 1 rated it suspicious. Three of them are tier-one vendors, and a critical-detection threshold was breached.
• Homepage behaviour: 3 of 3 sandbox runs completed with zero external requests and no wallet-connect, hidden-form or clipboard-write activity. There were 3 console errors.

Regulatory Verification Notes

No licensing, registration or legal-entity information could be tied to this site. The disclosure position is unclear, and both ownership and governance are opaque. Together these mean the site cannot be linked to any accountable operator. This is an identity and transparency limitation, separate from the threat findings above. A site that invites token claims and offers no accountable counterparty gives a user no recourse if funds are lost. No broker-reputation record matched the domain, so there is no third-party regulatory signal in either direction. Evidence:

• Homepage: no operator name, legal entity, licence or registration reference was identified.
• Hosting infrastructure: served from AS16509 (AMAZON-02 - Amazon.com, Inc., US).
• Transport encryption: TLS certificate issued by WR1 (DV, domain-validated only), valid to 2026-11-27. DV confirms control of the domain, not the identity of its operator.

What to Verify Next

Any claim or airdrop connected to PENGU or Pudgy Penguins should be checked only through the brand's official channels, reached by typing addresses manually or using independently bookmarked links, never through this site. The site should not be used until the external detections are cleared. A fresh reputation check is needed before any reassessment. Official support and contact channels should be confirmed offline before any engagement. Evidence:

• Homepage: the claim offer appears under a generic hosted subdomain. It is not on a domain independently tied to the brand.
• Threat intelligence: the most recent abuse activity on the associated infrastructure was reported within the last day.

Summary Verdict

The site is assessed as high-risk. Active malicious detections and a blacklisting outweigh the valid encryption certificate and the clean sandbox behaviour. The brand-lure pattern and the absence of any verifiable operator further reduce confidence. The available evidence supports no legitimacy conclusion.

Infrastructure Integrity

The site is hosted on AS16509 (Amazon) and fronted by a trusted CDN/WAF platform, and its observed addresses are all edge servers. The origin server was not observable. That limits independent hosting verification and means content could be swapped quickly without any visible change in the infrastructure. This is a mitigating factor only and cannot offset the reputation risk. A large number of abuse reports sit on one shared platform address, but they were discounted because they apply to shared provider infrastructure and not specifically to this site.

Closing Assessment

Account login, wallet connection, credential entry and any financial interaction with this site should be avoided. Casual viewing carries the lowest exposure. Any download or transaction prompt should be declined, and any claim of entitlement should be confirmed solely through the brand's official, independently sourced channels.

Signals weighed against the site

• AbuseIPDB: 91 reports on hosting IP 64.29.17.195 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.