pendencian[.]xyz

This domain is flagged as a high-risk generic phishing threat targeting users through a fake login portal. The page title 'Iniciar' suggests an attempt to mimic legitimate authentication pages, likely harvesting credentials for unauthorized access or financial fraud. Analysis indicates the domain is designed to deceive users into entering sensitive information under the guise of a trusted service. Infrastructure analysis reveals the domain was registered on June 09, 2026, through TuringSign Inc. d/b/a Cosmotown. It currently resolves to the IP address 185.221.216.121 and has been flagged by 6 out of 95 security vendors on VirusTotal. Despite its recent creation, the domain remains active and unblocked by a significant portion of security providers, increasing its potential reach. Users who have visited pendencian.xyz or entered credentials on the site should immediately revoke any submitted information, change passwords for associated accounts, and monitor for unauthorized activity. Network administrators are advised to block the domain and its resolving IP at the perimeter. If financial or sensitive data was exposed, affected parties should report the incident to relevant authorities and consider additional identity protection measures.