genesis-pendle[.]live

Analysis of genesis-pendle.live confirms its classification as a phishing domain targeting Pendle, a known decentralized finance protocol. The domain was registered on February 21, 2026, and resolved to the IP address 188.114.96.3, hosted on Cloudflare's infrastructure (AS13335). As of July 23, 2026, the domain is offline, though its prior activity triggered detections from multiple security vendors. Specifically, four of ninety-three security vendors on VirusTotal flagged the domain, and it appears on three independent security blocklists.

Major security providers, including PhishDestroy, MetaMask, and SEAL, have explicitly blocked this domain, reinforcing its malicious classification. The SSL certificate (WE1) is consistent with Cloudflare's edge network, offering no additional indicators of compromise but confirming the domain's reliance on Cloudflare's hosting environment. No evidence of redirection chains or associated phishing kits was provided, limiting deeper infrastructure analysis. The domain's creation date aligns with typical phishing campaign timelines, where short-lived domains are deployed for brand impersonation before takedown.

Defenders should treat this domain as confirmed malicious infrastructure, particularly for users interacting with Pendle-related services. Given its offline status, further monitoring of related domains or IP reuse patterns is recommended to preempt potential successor campaigns. No additional brand-specific content or page details were available for analysis.