pendle[.]finance-waliets-v2-apps[.]com

Analysis of pendle.finance-waliets-v2-apps.com indicates that the domain was registered on February 21, 2026 and is currently listed as offline. The site resolves to the IP address 172.67.141.126, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The domain presents a valid SSL certificate identified as WE1, suggesting the use of HTTPS for client connections. The page title returned by the server is “Access Denied,” and the domain has been classified as a brand‑impersonation campaign targeting the cryptocurrency platform Pendle.

PhishDestroy has placed the domain on its blocklist, and the domain appears on one additional security blocklist, confirming that at least one independent threat‑intelligence source has flagged the host. VirusTotal reports that two of ninety‑three scanning engines have flagged the domain, providing limited but corroborating evidence of malicious intent. Gridinsoft assigns a trust score of 0 out of 100, indicating an extremely low reputation. The registrar information is not disclosed in the provided data, and no further details about the underlying phishing kit or payload are available.

Uncertainty remains regarding the specific phishing pages or credential‑harvesting mechanisms, as the observed HTTP response is limited to an “Access Denied” title. Defenders should continue to block the domain at network perimeter devices, update DNS filtering policies to include the observed IP range, and monitor for any future re‑registration attempts. Additional investigation of the SSL certificate chain and correlation with other Cloudflare‑hosted impersonation domains may reveal shared infrastructure that can be leveraged for proactive mitigation.