pendlle-flnance[.]co[.]uk

The domain pendlle-flnance.co.uk is a phishing site engaged in brand impersonation targeting Aave, a decentralized finance protocol. It presents itself as the legitimate Aave platform to deceive users into entering sensitive information, such as login credentials or wallet details. No crypto drainer kit was detected, but the site poses an elevated risk due to its deceptive nature. As of the latest verification, pendlle-flnance.co.uk has been taken offline.

Technical indicators confirm the malicious intent of pendlle-flnance.co.uk. The domain was flagged by 1 of 95 security vendors on VirusTotal, including Webroot, and appears on 1 security blocklist (PhishDestroy). It was registered through Dynadot LLC on February 21, 2026, and resolves to the IP address 104.21.80.1, hosted by Cloudflare in the US. The SSL certificate is issued by Google Trust Services (WE1), and the observed page title mimics Aave's official branding: 'Aave - Open Source Liquidity Protocol'. The domain uses Cloudflare nameservers (earl.ns.cloudflare.com and sreeni.ns.cloudflare.com) and supports HTTP/3.

Users who interacted with pendlle-flnance.co.uk should immediately change any passwords or credentials entered on the site and enable two-factor authentication (2FA) on their accounts. Monitor financial and crypto wallets for unauthorized transactions, and consider revoking any token approvals if wallet connections were made. Report the phishing domain to the impersonated brand (Aave) and relevant authorities, such as Google Safe Browsing or local cybercrime units, to aid in takedown efforts.