app-pancakeswap[.]to

The domain app-pancakeswap.to is a phishing site engaged in brand impersonation targeting users of the Across protocol. It presents itself as a PancakeSwap Finance platform to deceive victims into connecting wallets, facilitating unauthorized transactions without deploying a known drainer kit. As of analysis, app-pancakeswap.to has been taken offline, but it previously posed an elevated risk of financial loss through wallet connection phishing.

Technical indicators confirm the malicious nature of app-pancakeswap.to. The domain was flagged by 3 of 95 VirusTotal security vendors, including Ermes, Gridinsoft, and SOCRadar, and appeared on 3 security blocklists: PhishDestroy, MetaMask, and SEAL. Registered through the Government of Kingdom of Tonga on February 21, 2026, it resolved to the IP address 104.21.63.177, hosted by Cloudflare in the US. The SSL certificate was issued by Let's Encrypt (R12), and the observed page title mimicked PancakeSwap Finance: 'Swap, Earn, and Grow in DeFi'. Gridinsoft assigned a trust score of 0/100, and technologies detected included YouTube, Cloudflare, and HTTP/3.

Victims who interacted with app-pancakeswap.to should immediately revoke any token approvals granted to the site and transfer funds to a new wallet. Enable transaction simulation tools to review pending approvals and monitor wallet activity for unauthorized transactions. Report the phishing domain to platforms like Google Safe Browsing, MetaMask’s phishing detection, and security blocklists such as PhishDestroy. If credentials were entered, change passwords for associated accounts and enable two-factor authentication to prevent further compromise.