v4-pendle[.]xyz

Analysis of the domain v4-pendle.xyz indicates it was established as a fraudulent airdrop scheme targeting users of the Pendle foundation. The domain was registered on February 21, 2026, and was operational until recently taken offline. Infrastructure analysis reveals the domain resolved to the IP address 104.21.64.1, hosted on Cloudflare's network (AS13335) in the United States. The SSL certificate associated with the domain is classified as WE1, a low-trust indicator often linked to malicious or hastily configured sites.

The page title, $PENDLE AIRDROP, explicitly suggests an attempt to deceive users into believing they are interacting with an official Pendle foundation airdrop event. This aligns with the identified scam type: a fake airdrop phishing kit. Detection data from security vendors is limited but indicative of malicious intent; the domain appears on one security blocklist and was flagged by PhishDestroy. VirusTotal records show that 3 out of 93 security vendors marked the domain as malicious, though this number is not conclusive on its own.

Defenders should treat this domain as a confirmed phishing threat. The domain's current offline status does not eliminate the risk of future reactivation or reuse of associated infrastructure. Network-level blocking of the IP 104.21.64.1 and monitoring for similar domains using the 'pendle' keyword in combination with airdrop-related terms is recommended. No additional details about the exact content or functionality of the phishing page are available at this time, as the site is no longer accessible for further analysis.