event-pendle[.]com

PhishDestroy identifies event-pendle.com as an active brand impersonation scam targeting Pendle users. This domain was flagged due to its deliberate misuse of the Pendle brand to deceive visitors into entering sensitive information such as login credentials or financial details. The threat is classified as a high-risk brand impersonation attack, specifically designed to exploit user trust in legitimate services. This domain exhibits multiple red flags consistent with malicious intent. VirusTotal currently shows 2/95 detections, indicating it has evaded traditional antivirus and security tools. The domain resolves to IP address 188.114.97.3 and was registered on April 05, 2026, through OwnRegistrar, Inc. It has already been blocked by ScamSniffer and Enkrypt, and is listed on two security blocklists, including PhishDestroy’s own database. The domain uses a Let’s Encrypt SSL certificate, which may lend it an air of legitimacy despite its malicious nature. The recent registration date and low detection rate suggest this campaign is either newly launched or actively evolving to avoid detection. Users should avoid interacting with this domain or any linked content, as it is likely part of a coordinated effort to harvest credentials or distribute malware. To mitigate risk, users should verify the authenticity of websites by checking domain details, avoiding links from unsolicited emails or messages, and using security extensions like ScamSniffer or Enkrypt to block known malicious domains. Organizations should update their threat intelligence feeds to include this domain and share indicators of compromise with their security teams. Immediate investigation into the IP address and associated infrastructure is recommended to prevent further abuse.