Security Scan: Fake xStocks, Pendle, and other sites bait cr

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/e3719991-c3f1-4489-9579-66951e03a0d5 Domain and IP registration (RDAP)/api/v1/rdap/e3719991-c3f1-4489-9579-66951e03a0d5How often this domain was scanned/api/v1/domain/stats/malwarebytes.com Scan history for this domain/api/v1/domain/history/malwarebytes.com?limit=15

This website contacted 26 IPs in 2 countries across 20 domains to perform 143 HTTP transactions. The main domain is malwarebytes.com and was registered 22 years ago.

Submitted URL: https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes

The Cisco Umbrella rank of the primary domain is #8,616 of the top 1 million websitesTop 10K Site

AI Security Verdict

Safe Website

Confidence: 97%

Risk Score

Legitimate Malwarebytes blog article about fake crypto voting sites; self-branded, established publisher domain, article type, no credential or payment forms, no threat-intel hits.

Safety Factors (5)

Established 22-year-old domain owned by the named publisher

News article context with author byline (Stefan Dasic, October 1, 2026) and article og:type

No credential or payment collection anywhere on the page

No Indicators of Compromise, hunting-rule matches or Safe Browsing flags

Underlying page text is a threat-intel writeup advising readers how to protect their wallets

Domain age information unavailable

Details

Page Title

Fake xStocks, Pendle, and other sites bait crypto users with rewards votes | Malwarebytes

Scan Type

public

Favicon Hash

MMH3: 1084106743

MD5: 6ce2be927069184364ac848f3d914067

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'www.malwarebytes.com' is registered with subdomain 'www'. Its registrable label 'malwarebytes' stretches across 12 characters holding four vowels versus eight consonants. Segmentation suggests 2 words: malware, bytes. Average segment length settles at 6 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.70s

Total Load Time

6.3 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:13,089 chars

Detector Agreement:100%

Website Classification

Primary Category

forum community discussion63% confidence

Type: spa

Method: ml+structural

All Detected Categories

forum community discussion

63%

technology software

63%

news/blog

50%

corporate

35%

cryptocurrency blockchain

32%

Detected Features

Articles

OG: article

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
18	192.0.66.233	San Francisco, California, United States	AS2635Automattic, Inc
5	13.32.121.45Cloudfront · CDN	New York, New York, United States	AS16509Amazon.com, Inc.
5	146.75.120.134Fastly · CDN	Frankfurt am Main, Hesse, Germany	AS54113Fastly, Inc.
5	192.0.76.3	San Francisco, California, United States	AS2635Automattic, Inc
5	192.0.66.178	San Francisco, California, United States	AS2635Automattic, Inc
5	142.251.20.97Google · CDN	United States	AS15169Google LLC
5	185.111.111.154	Frankfurt am Main, Hesse, Germany	AS212238Datacamp Limited
5	172.64.149.114Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	3.222.54.178Aws · CLOUD	Ashburn, Virginia, United States	AS14618Amazon.com, Inc.
5	142.251.14.157Google · CDN	United States	AS15169Google LLC
143	26	-	-