event-pendle[.]xyz

The domain event-pendle.xyz is a confirmed phishing site engaged in brand impersonation targeting Pendle, a decentralized finance protocol. It poses an elevated risk by mimicking Pendle’s branding to deceive users into disclosing sensitive information or interacting with malicious smart contracts. No crypto drainer kit was detected, but the site’s intent was to exploit trust in the Pendle brand. As of the latest verification, event-pendle.xyz has been taken offline.

Technical analysis shows that event-pendle.xyz was flagged by 2 of 95 security vendors on VirusTotal, including Gridinsoft and SOCRadar, with a Gridinsoft trust score of 0/100. The domain was registered through Dynadot LLC on March 05, 2026, and resolved to the IP address 172.67.141.100, hosted on Cloudflare’s infrastructure (AS13335) in the US. It appeared on one security blocklist (PhishDestroy) and used nameservers langston.ns.cloudflare.com and sue.ns.cloudflare.com. The SSL certificate was issued by Let’s Encrypt, and the observed page title was 'Even geduld...'. Technologies detected include Cloudflare and HTTP/3.

Users who interacted with event-pendle.xyz should immediately change any credentials or passwords associated with Pendle or related services, enable two-factor authentication, and monitor accounts for unauthorized activity. If cryptocurrency interactions occurred, revoke any token approvals granted to unknown contracts and consider transferring funds to a new wallet. Report the domain to relevant platforms, including Google Safe Browsing, PhishTank, or the impersonated brand’s official security channels, to aid in broader mitigation efforts.