pendlee[.]finance-v4-wailet-app[.]com

This domain, pendlee.finance-v4-wailet-app.com, is actively impersonating Pendle as part of a high-risk brand impersonation campaign. Registered on February 21, 2026, through MAT BAO CORPORATION, the domain currently resolves to 172.67.190.87 (AS13335, Cloudflare, Inc., US) and is proxied behind Cloudflare nameservers alexandra.ns.cloudflare.com and dimitris.ns.cloudflare.com. The site returns an HTTP 403 status, with a page title indicating a 521 server error, suggesting either misconfiguration or deliberate evasion. SSL certification is provided by Google Trust Services (WE1), a common choice for both legitimate and malicious infrastructure. Analysis indicates the domain has been flagged by at least one security blocklist and detected by 3 of 93 vendors in a recent scan. The use of Cloudflare infrastructure and HTTP/3 may complicate takedown or attribution efforts. While the exact content of the site remains unanalyzed, the domain name and known intelligence strongly suggest an intent to deceive users into interacting with a fraudulent Pendle-related service. Defenders should treat this domain as hostile and prioritize blocking or monitoring traffic to it. The domain’s registration age (under five months) and active status warrant continued scrutiny, particularly given its association with a known brand target. If internal logs show any connections to this domain, investigate for credential theft, wallet drainers, or other malicious activity linked to Pendle impersonation. No further details on the phishing kit or payload are available at this time.