pancakeswap-finance[.]org

The domain pancakeswap-finance.org is identified as a high-risk brand impersonation threat targeting the PancakeSwap brand. It was registered through CSL Computer Service Langenbach GmbH d/b/a joker.com and has been taken offline. The domain poses a significant risk due to its resemblance to the legitimate PancakeSwap website, potentially leading users to believe they are interacting with a trusted source.

Infrastructure analysis reveals that pancakeswap-finance.org has been flagged by 16 out of 95 security vendors on VirusTotal, indicating a moderate to high level of suspicion. The domain was registered on March 28, 2026, and resolves to the IP address 188.114.96.3. It appears on 3 security blocklists and has been mentioned in 28 threat intelligence pulses on AlienVault OTX. The domain has been taken offline, and its current status is reflected in the blocklists maintained by CryptoFirewall, PhishDestroy, and Enkrypt.

The domain has been successfully taken offline, reducing the immediate risk to users. However, the infrastructure and technical indicators such as the high VirusTotal score and multiple blocklist appearances suggest that the threat actors may have used this domain to conduct phishing or other fraudulent activities. Users are advised to remain vigilant and verify the legitimacy of any PancakeSwap-related websites they visit. The remaining risk is low, but monitoring for any reactivation or similar domain registration is recommended.