voting-pendlefinance[.]xyz

This domain is an active brand impersonation site designed to deceive users into believing it is an official governance or voting platform for Pendle, a decentralized finance protocol. The site likely aims to harvest credentials, private keys, or other sensitive information by mimicking Pendle’s branding, layout, or functionality. Given the high-risk nature of such impersonation, users may unknowingly expose wallet addresses, seed phrases, or authentication tokens, leading to unauthorized access or asset theft. Analysis indicates the domain was registered on June 21, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with malicious infrastructure. It resolves to the IP address 104.21.11.84 and is currently flagged by 4 out of 95 security vendors on VirusTotal. Additionally, the domain appears on 2 security blocklists and is proactively blocked by at least two major security providers. The SSL certificate is issued by Google Trust Services, which does not mitigate the underlying malicious intent. Users who have visited voting-pendlefinance.xyz should immediately revoke any permissions granted to connected applications or wallets. If credentials or private keys were entered, affected accounts must be migrated to new wallets, and all associated assets should be transferred to secure addresses. Monitor transaction histories for unauthorized activity and report the domain to relevant security teams or blocklist providers to aid in broader mitigation efforts. Avoid interacting with the domain or any links derived from it.