pendlee[.]at

The domain pendlee.at was registered on February 21, 2026 through Hosting Concepts B.V. d/b/a Registrar.eu and currently resolves to the Cloudflare IP address 172.67.133.98, belonging to AS13335 Cloudflare, Inc. The site presents an HTTP 301 redirect and serves a TLS certificate issued by Google Trust Services under the WE1 identifier, indicating use of Cloudflare's SSL infrastructure. The page title observed is "Pendle - Plateforme de Trading Intelligent 2026," and the domain explicitly targets the Pendle brand, classifying the operation as a DeFi scam. Infrastructure analysis shows the domain is protected by Cloudflare's DNS service (nameservers arushi.ns.cloudflare.com and wilson.ns.cloudflare.com) and utilizes HTTP/3, confirming modern web delivery. Threat intelligence signals include placement on one security blocklist, active blocking by PhishDestroy, and detection by 14 of 95 VirusTotal scanners. AlienVault OTX references the domain in a single pulse, reinforcing its malicious reputation. The risk level is assessed as high and the status remains active. While the exact content of the site beyond the title has not been examined, the convergence of brand impersonation, DeFi‑related naming, and multiple security vendor detections suggests a purposeful fraudulent campaign. Defenders should add pendlee.at to block lists, monitor DNS queries for this domain, and consider broader network controls to prevent credential or fund exposure to DeFi‑focused scams. Continuous re‑evaluation is advised as additional threat data may emerge.