voting-pendlefinancesl[.]xyz

The domain voting-pendlefinancesl.xyz is flagged for credential theft, indicating it is designed to capture and misuse user login credentials. The domain impersonates Pendle Finance, a legitimate financial service brand, to trick users into believing they are interacting with an official platform. This impersonation is evident from the page title 'Pendle Rewards Vote | Pendle Finance', which closely mimics official branding to gain user trust.

Analysis indicates that 3 out of 95 security vendors on VirusTotal have flagged this domain as malicious. The domain is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and resolves to the IP address 104.21.33.92. Created on June 21, 2026, the domain is also mentioned in 2 threat intelligence pulses on AlienVault OTX. The Google Safe Browsing (GSB) status is currently unknown, and the domain has not been widely blocklisted, which may contribute to its ongoing effectiveness.

The domain remains active, posing a significant risk to users who may be tricked into entering their credentials. Immediate response actions include avoiding any interaction with the domain and educating users about the risks of brand impersonation. Despite the limited number of security vendors flagging this domain, the high risk level suggests that it should be treated with caution. Users are advised to verify the authenticity of any financial service websites by visiting official URLs and using trusted bookmarks or search results.