builders-pendle[.]finance

On August 04, 2026 the domain builders-pendle.finance was classified as a generic phishing site and remains active while its risk level is listed as under investigation. Automated reconnaissance shows the domain is present on four independent security blocklists and is explicitly blocked by the PhishDestroy, MetaMask, ScamSniffer and SEAL filtering services. A VirusTotal query recorded scans from 91 antivirus and URL‑reputation engines; none of the engines flagged the domain at the time of analysis. The absence of detections does not constitute a safety indication, nor does it rule out malicious use.

No additional infrastructure details such as registrar information, hosting IP, ASN or SSL certificate data are available in the current intelligence set. Consequently, the precise hosting environment and any potential command‑and‑control infrastructure remain unknown. Defensive recommendations include adding builders-pendle.finance to local deny lists, configuring web proxies to drop traffic to the domain, and ensuring the four named blocklists are subscribed to in security appliances.

Continuous monitoring of the domain on threat‑intel platforms is advised, as future observations may reveal additional attributes such as hosting location, certificate fingerprints, or associated malware samples. Organizations should also educate end users about the risk of unsolicited communications that reference the domain, reinforcing the practice of verifying URLs before credential entry. Until further evidence emerges, the domain should be treated as hostile and prevented from reaching internal browsers or email clients.