pendle[.]gift

As of July 12, 2026, the domain pendle.gift is actively engaged in a brand impersonation attack targeting the brand Pendle. The domain was registered on April 14, 2026, through TUCOWS.COM, CO., and is currently still active. This domain has been flagged by 5 out of 95 security vendors on VirusTotal, indicating a potential risk. The Gridinsoft trust score for this domain is 0 out of 100, which is the lowest possible score, further reinforcing the high risk level associated with the domain. Additionally, pendle.gift appears on six security blocklists and has been referenced in 14 threat intelligence pulses on AlienVault OTX, suggesting that it has been involved in multiple security incidents and is a known threat vector. The domain resolves to the IP address 104.21.37.112 and uses an SSL certificate issued by Let's Encrypt, which is a common choice for phishing sites to appear more legitimate to unsuspecting users. The page title 'Just a moment...' may be an attempt to delay or confuse users while the phishing site loads or redirects to a malicious page. Defenders should be vigilant and monitor for any signs of phishing activity, including suspicious emails or messages that direct users to this domain. It is recommended to block access to pendle.gift and to educate users about the risks of brand impersonation attacks. Regular updates to security policies and threat intelligence feeds can help mitigate the impact of such threats. Analysis of the domain's infrastructure and the context in which it is being used can provide further insights into the methods and motivations of the attackers, aiding in the development of more effective defensive strategies.