app[.]pendlel[.]finance

The domain app.pendlel.finance is a confirmed phishing site engaged in brand impersonation targeting Google. It presents itself as a legitimate Google service to deceive users into entering sensitive information, classifying it as an email-based scam. No crypto drainer kit was identified in this campaign. The site is currently taken offline, reducing immediate risk to users.

Technical indicators confirm app.pendlel.finance as malicious. The domain was flagged by 9 of 95 VirusTotal security vendors, including ADMINUSLabs, alphaMountain.ai, and BitDefender, though Google Safe Browsing did not detect it. It appears on one security blocklist (PhishDestroy) and holds a Gridinsoft trust score of 0/100. Registered through Web Commerce Communications Limited dba WebNic.cc on February 21, 2026, the domain resolves to IP address 142.250.31.103 (US, AS15169 Google LLC) and uses an SSL certificate issued by WR2. The observed page title was 'Google,' reinforcing its impersonation tactic. Nameservers are ns100.webnic.cc and ns101.webnic.cc.

Users who interacted with app.pendlel.finance should immediately change any passwords entered on the site and enable two-factor authentication (2FA) on their Google accounts. Monitor accounts for unauthorized activity and report suspected fraud to Google’s support channels. To report the phishing domain, submit it to Google Safe Browsing, PhishTank, or local cybersecurity authorities. If financial or personal data was exposed, consider contacting identity protection services for further mitigation.