pendle-airdrop.finance

The domain pendle-airdrop.finance has been identified as a high-risk crypto drainer phishing site. Analysis confirms it operates under the specific threat category of a cryptocurrency drainer, designed to illicitly extract digital assets from victims by impersonating the Pendle protocol. As of the latest assessment, the domain is offline, though prior activity indicates it was actively targeting users through fraudulent airdrop promotions. Infrastructure analysis reveals the domain was registered through US-ZHOUTI-NET-01 (ASN: 400992) and resolved to the IP address 23.177.185.92, hosted within the United States under AS400992 ZhouyiSat Communications. Security vendors flagged the domain in 17 of 95 VirusTotal scans, indicating widespread detection as malicious. The site appears on five independent security blocklists, further corroborating its classification as a threat. The absence of an SSL certificate and the use of the Angel Drainer kit align with known tactics employed in crypto drainer campaigns. The page title, 'Airdrop | Pendle,' was explicitly designed to deceive users into believing the site was an official Pendle promotion. Current status confirms pendle-airdrop.finance has been taken offline, though residual risk remains for users who may have interacted with the domain prior to its deactivation. Organizations and individuals are advised to block the domain and its associated IP address at the network level to prevent accidental access. Users who engaged with the site should immediately revoke any connected wallet permissions and monitor their accounts for unauthorized transactions. Given the high-risk nature of crypto drainers, proactive measures such as reviewing recent transaction histories and enabling multi-factor authentication on critical accounts are strongly recommended.