distribution-pendle[.]app

The domain distribution-pendle.app is a phishing site engaged in brand impersonation targeting Pendle, a known decentralized finance platform. It poses an elevated risk by attempting to deceive users into believing they are interacting with the legitimate Pendle brand, potentially leading to credential theft or financial fraud. No crypto drainer kit was identified, and the site is currently taken offline.

Technical analysis of distribution-pendle.app shows limited detection, with 1 of 95 VirusTotal security vendors flagging it as malicious. The domain is registered through Cloudflare, Inc., and resolves to the IP address 172.67.134.241, hosted on Cloudflare's network (AS13335) in the US. It appears on 1 security blocklist, specifically PhishDestroy, and lacks an SSL certificate. The observed page title was 'Nur einen Moment…', and the nameservers are louis.ns.cloudflare.com and veronica.ns.cloudflare.com. No creation date or SSL issuer information is available. Gridinsoft assigned a trust score of 0 out of 100 to the domain.

Users who interacted with distribution-pendle.app should take immediate action to secure their accounts. If credentials were entered, change passwords for Pendle and any other services where the same credentials may have been reused, and enable two-factor authentication. Monitor accounts for unauthorized activity and report any suspected fraud to the legitimate Pendle support team. To report the phishing domain, submit it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group. Victims may also contact their local cybercrime authorities or the impersonated brand for further assistance.