---
title: "Is claim-your-pengu-wkyq.vercel.app a Scam? Trust Score 5/100"
source: TrustSniffer
type: Website trust & fraud report
subject: "claim-your-pengu-wkyq.vercel.app"
verdict: "Critical Risk"
title: "Is claim-your-pengu-wkyq.vercel.app a Scam? Score 5/100"
trust_score: 5
classification_confidence: 55
canonical_url: https://trustsniffer.com/report/claim-your-pengu-wkyq.vercel.app
assessed: 2026-10-27
---

# Is claim-your-pengu-wkyq.vercel.app a scam? TrustSniffer's high-risk assessment: 5/100

## Verdict


**Verdict: Critical Risk, trust score 5/100.** claim-your-pengu-wkyq.vercel.app shows high-risk / scam indicators.

This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.

Labels: Sensitive Interaction Risk, Governance Risk

Assessed 2026-10-27 by automated analysis. Classification confidence 55%.

## Evidence status and limitations


Evidence completeness: Not recorded

- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.

## At a glance

The checks that decide most of this verdict.

| Check | Result | Status |
| --- | --- | --- |
| Malware engines | 14 flagged it (VirusTotal) | Risk |
| Google Safe Browsing | Not listed (Google) | Clear |
| Abuse reports on the host | 0% confidence (AbuseIPDB, 87 reports; shared hosting inflates reports) | Clear |
| Domain age | Not available (No registration record was returned) | Noted |
| Certificate | Encrypted connection (Issued by WR1) | Noted |
| Hosted by | AMAZON-02 (Server in US) | Noted |

## The page as captured


![Screenshot of the claim-your-pengu-wkyq.vercel.app homepage captured during the TrustSniffer assessment](https://trustsniffer.com/outputs/claim-your-pengu-wkyq.vercel.app/screenshots/first.png)

_What claim-your-pengu-wkyq.vercel.app served when TrustSniffer captured it on 2026-10-27. The page may look different now._

## Key findings


- Automated classification: Sensitive Interaction Risk.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.

## Full analysis


### Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

The website is a single-page "claim" landing page published under the title "Claim Your $PENGU | Pudgy Penguins". It runs on a free, auto-generated subdomain of the Vercel hosting platform and has no domain of its own. It presents itself as a token-claim or airdrop destination tied to the Pudgy Penguins brand and the PENGU token. Its apparent purpose is to draw visitors into claiming a crypto-asset reward, a format widely used for credential and wallet-harvesting lures.


### Scam/Impersonation Risk

Several leading security vendors independently flag this site as malicious, and it has been placed on a **confirmed blacklist**. The detections are numerous and strong enough to trigger a hard reputational cap, and they are decisive regardless of how clean the surface technical posture appears. The framing aggravates this: the page borrows a well-known NFT brand's name and a token-claim hook ("Claim Your $PENGU"), yet it sits on a disposable hosting subdomain whose hostname merely imitates the claim narrative. Nothing in the evidence connects the site to the genuine brand's official properties. Separately, a large volume of abuse reports exists against the hosting address. These are discounted because the address belongs to a shared platform provider and the reports cannot be attributed to this site, so they are not counted as site-specific evidence. In sandbox testing, the page made no external requests, triggered no wallet-connection or wallet-draining routines, and showed no cloaking or clipboard manipulation. This is a mitigating observation about the behavior captured during the test only, and it does not offset the blacklist. A malicious payload can be swapped in later, or be served only to selected visitors. Evidence:

- Homepage: the page title combines the "$PENGU" token claim with the "Pudgy Penguins" brand name, and the analysed content is about 1,868 characters of text.
- Threat intelligence: 14 malicious and 1 suspicious verdicts were returned, including from three tier-one security vendors.
- Hosting address: 87 abuse reports were recorded against a shared provider address, treated as discounted shared-infrastructure noise.
- Sandbox: 3 of 3 runs completed with zero external network activity, zero wallet-related behavior and 3 console errors.

### Regulatory Verification Notes

The analysed homepage shows no licence, registration number, legal entity name or operator identity. No legal or identity pages were captured, so no operator can be independently connected to the site or to the brand it invokes. A token-claim site that handles digital assets would ordinarily be expected to disclose an accountable entity. No third-party broker or regulatory-registry match exists for this site, and the absence of one is not itself evidence of wrongdoing. The decisive risk here is the confirmed threat listing described above, not any licensing gap. The site's transport encryption is valid but is only basic domain-validated encryption. It confirms an encrypted connection and says nothing about who operates the site. Evidence:

- Homepage: no company name, licence, registry reference or contact identity appears in the captured content.
- Transport encryption: the TLS certificate was issued by WR1 at domain-validation (DV) level and is valid to 2026-11-27, with 31 days remaining.
- Hosting: the site is served from AS16509 (AMAZON-02 - Amazon.com, Inc., US), with the origin in the United States.

### What to Verify Next

No interaction with the site is advised until the threat listings are cleared. Anyone who believes a genuine PENGU or Pudgy Penguins claim exists should locate it only through the brand's officially announced channels, reached independently of this page, such as the project's verified social accounts or official website typed in manually. Any token-claim announcement should be cross-checked against those channels, and the claim page's hostname should be compared character by character with the officially published address. Any wallet that has already interacted with this site should have its token approvals reviewed and revoked. Users who entered credentials or seed phrases should treat those credentials as exposed and rotate them from a clean device. Official support or contact channels should be confirmed only through the genuine brand's own communications. Evidence:

- Homepage: the claim framing and brand name offer no verifiable link to an official project property.
- Threat intelligence: the active listings are recent and unresolved, so no clean re-scan exists to rely on.
- Sandbox: no wallet interaction was observed in testing, so any exposure would arise only from later or targeted behavior.

### Summary Verdict

The site carries an elevated risk posture and is assessed as untrustworthy for any sensitive interaction. Confirmed adverse security-community findings, combined with a brand-themed token-claim lure on a disposable address and no verifiable operator, outweigh the benign sandbox behavior and the valid encryption. Legitimacy is not supported, and the site's real-world operator remains unconnected to the brand it invokes.


### Infrastructure Integrity

The site is delivered through Vercel's platform, running on Amazon cloud infrastructure behind a mainstream CDN/WAF layer. All observed addresses are provider edge nodes, and the origin server was not visible. This is a mitigating factor only, because the provider is reputable and the infrastructure is stable. It does not vouch for the content hosted on it. Edge-only visibility also prevents independent verification of the underlying host and can mask a rapid content swap behind an unchanged address.


### Closing Assessment

Treat the site as unsafe for any login, credential entry, wallet connection or financial action, and limit contact to read-only viewing from an isolated environment, if at all. Anyone who has already engaged with it should revoke wallet approvals and rotate credentials promptly.


_Written analysis generated 2026-10-27 by the TrustSniffer Analysis Engine from the evidence in this report._

## What the analysis found

3 findings contributed to this verdict, raised by governance, external reputation, registration and ownership.

### 01 Governance
- A threat feed lists this domain as malicious, and that caps the score whatever the other checks found. (Governance `rule:GOV_CRITICAL_BLACKLIST`)

### 02 External reputation
- An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it. (External reputation `rule:EXT_BLACKLIST_CRITICAL`)

### 03 Registration and ownership
- The public registration record for this domain is incomplete. (Registration and ownership `rule:KF_WHOIS_INCOMPLETE`)

### Signals weighed against the site

- AbuseIPDB: 87 reports on hosting IP 216.198.79.3 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.

## Identity verification


| Field | Value |
| --- | --- |
| Status | UNKNOWN |
| Identity score | 50/100 |
| Identity verification confidence | 30% |

- AI page analysis unavailable (page captured; identity not AI-verified)

_Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._

## What TrustSniffer observed

First-party facts recorded during the assessment of claim-your-pengu-wkyq.vercel.app.

- The request stayed on claim-your-pengu-wkyq.vercel.app. It was not redirected to another domain. (Clear)
- It is hosted on AMAZON-02, from a server in US. (Noted)

## Domain intelligence


| Field | Value |
| --- | --- |
| Registrar | Not available |
| Hosting | AMAZON-02 - Amazon.com, Inc., US |
| Country | US |
| Server IP | 216.198.79.3 |
| Name servers | Not available |
| CDN / edge network | Detected |
| Resolved IP addresses | 8 |
| Edge IP addresses | 8 |
| Likely origin IP addresses | 0 |
| SSL issuer | WR1 |
| SSL expiry | 2026-11-27 |
| Domain age | Not available (no registration date was returned) |
| Domain expiry | Not available |
| Archive first seen | Not available |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 14 flagged \| AbuseIPDB: 0% confidence, 87 reports \| Google Safe Browsing: 0 matches |

## About this assessment


**Was this report useful?** Tell other people what you think of TrustSniffer, good or bad. An honest review helps others decide whether to rely on these checks. [Review TrustSniffer on Trustpilot](https://www.trustpilot.com/review/trustsniffer.com)

A trust score summarises the evidence TrustSniffer could collect about claim-your-pengu-wkyq.vercel.app at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.

TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.

## Related on TrustSniffer
- [binance-cat.vercel.app](https://trustsniffer.com/report/binance-cat.vercel.app), a similar name (Critical Risk, 0/100)
- [newscanner-six.vercel.app](https://trustsniffer.com/report/newscanner-six.vercel.app), a similar name (Critical Risk, 0/100)
- [send-dt-bsc.vercel.app](https://trustsniffer.com/report/send-dt-bsc.vercel.app), a similar name (Critical Risk, 0/100)
- [click-one-transfer.vercel.app](https://trustsniffer.com/report/click-one-transfer.vercel.app), a similar name (Critical Risk, 0/100)
- [amlcrystal-scanner.vercel.app](https://trustsniffer.com/report/amlcrystal-scanner.vercel.app), a similar name (Critical Risk, 0/100)
- [livetrustwalletsnycs.vercel.app](https://trustsniffer.com/report/livetrustwalletsnycs.vercel.app), a similar name (Critical Risk, 0/100)
- [sendbscusdtbnb.vercel.app](https://trustsniffer.com/report/sendbscusdtbnb.vercel.app), a similar name (Critical Risk, 0/100)
- [bsc-verify.vercel.app](https://trustsniffer.com/report/bsc-verify.vercel.app), a similar name (Critical Risk, 0/100)
- [rideofy.com](https://trustsniffer.com/report/rideofy.com), another site assessed as critical-risk (Critical Risk, 0/100)
- [carrosel.co.ke](https://trustsniffer.com/report/carrosel.co.ke), another site assessed as critical-risk (Critical Risk, 0/100)
- [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory), the full risk directory
- [Other domains assessed as high-risk or phishing](https://trustsniffer.com/directory/phishing-domains), same verdict band
- [Check another website](https://trustsniffer.com/web-intelligence), run a new assessment
- [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk), on-chain screening
- [The TrustSniffer Risk Index](https://trustsniffer.com/stats), how this verdict compares

## Guides
- [No Age Distribution Yet for Suspicious Websites](https://trustsniffer.com/blog/no-age-distribution-suspicious-websites)
- [How to revoke token approval after a scam site](https://trustsniffer.com/blog/how-to-revoke-token-approval-after-a-scam-site)
- [Stablecoin Freezes, Oct 26, 2026: 11 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-10-26)

---
*Source: [TrustSniffer](https://trustsniffer.com/report/claim-your-pengu-wkyq.vercel.app) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/claim-your-pengu-wkyq.vercel.app · assessed 2026-10-27.*