airdropendless[.]live

This domain is flagged as an elevated-risk brand impersonation threat specifically targeting Pendle, a decentralized finance protocol. The site, titled 'Endless Airdrop - Claim Your Tokens,' mimics legitimate airdrop campaigns to deceive users into disclosing sensitive credentials or transferring assets under false pretenses. Analysis indicates the domain operates under the guise of an official token distribution event, a common tactic in cryptocurrency-related phishing schemes. Infrastructure analysis reveals the domain was registered through Web Commerce Communications Limited and resolves to the IP address 172.67.152.129, which is associated with Cloudflare proxy services. Detection metrics indicate 4 out of 95 security vendors on VirusTotal have flagged the domain as malicious, while it appears on at least one security blocklist. The Gridinsoft trust score for this domain is 0 out of 100, reflecting a complete lack of legitimacy. Additional technologies detected include Cloudflare Browser Insights and HTTP/3, suggesting the use of content delivery networks to obfuscate the true origin of the phishing infrastructure. Mitigation measures should focus on disrupting user interaction with the domain and preventing further exploitation. Network-level protections, such as DNS filtering or IP-based blocking of 172.67.152.129, can effectively neutralize access to the malicious site. Organizations and individuals should prioritize user education on recognizing brand impersonation tactics, particularly in the context of cryptocurrency airdrops, which frequently lack verifiable official announcements. Monitoring for similar domains registered through the same registrar or resolving to identical IP ranges may help identify related threats in the wild. Immediate reporting to relevant security communities and domain registrars can aid in takedown efforts and reduce the operational lifespan of such campaigns.