pendle-event[.]org

Analysis of pendle-event.org indicates a recent brand impersonation campaign targeting the Pendle brand. The domain was registered on February 28, 2026 through NiceNIC International Group Co., Limited and resolves to the IP address 188.114.97.3, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. Both authoritative nameservers, emma.ns.cloudflare.com and reese.ns.cloudflare.com, confirm that the site is hosted behind Cloudflare's edge network. No SSL certificate was detected for the domain, suggesting that HTTPS was not enabled at the time of observation.

The HTTP response returned a generic page title "Just a moment...", providing no substantive content for further verification. Security telemetry shows the domain appears on one blocklist and has been actively blocked by PhishDestroy. VirusTotal scans report that five of ninety‑three security vendors flagged the domain, reinforcing the suspicion of malicious intent. Gridinsoft assigned a trust score of 0 out of 100, indicating a complete lack of confidence in the site's legitimacy.

The site’s current status is offline, which limits real‑time analysis but does not mitigate the risk of prior or future use. Defenders should continue to monitor for any re‑appearance of the domain or related infrastructure, enforce domain‑based blocking for pendle-event.org across email gateways and web proxies, and consider adding the associated IP range to threat‑intel feeds. Because the page content was not captured, further investigation is warranted if the domain reactivates, focusing on any credential‑capture forms or redirects that may be introduced. Until the domain is definitively taken down, it remains a high‑confidence indicator of brand impersonation activity against Pendle.