points-pendle[.]app

Analysis indicates that points-pendle.app was registered on May 28, 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com and is hosted behind Cloudflare (AS13335) with the IP address 104.21.15.76. The domain resolves to Cloudflare’s edge network and presents a TLS certificate issued by Let’s Encrypt (identifier E8). The site returns HTTP 403, and the only observable page title is “Nur einen Moment…”. The infrastructure is associated with a brand impersonation campaign targeting Pendle, as indicated by the declared brand target and scam type. Five of ninety‑one VirusTotal scanners have flagged the domain, and Gridinsoft assigns a trust score of 0 out of 100. The domain appears on three security blocklists and is currently listed as active with a high risk rating. Defenders should treat the domain as malicious, block DNS resolution and HTTP traffic to the host, and monitor for any related indicators such as the Cloudflare nameservers adam.ns.cloudflare.com and danica.ns.cloudflare.com. Because the page content has not been publicly dissected, the exact payload or credential‑collection mechanism remains uncertain; however, the combination of brand impersonation labeling, low trust scores, and multiple vendor detections strongly suggests a phishing operation. Continuous observation of any new subdomains or changes in TLS certificates is recommended.