pancakeswap-official[.]com

Analysis of pancakeswap-official.com indicates it is an inactive domain that was created on 18 October 2025 and is being used to impersonate the PancakeSwap brand in a crypto‑scam context. The domain is registered through Dominet (HK) Limited and resolves to the IPv6 address 2606:4700:3031::ac43:b860, which belongs to Cloudflare’s AS13335 network located in the United States. The name server configuration includes two Cloudflare authoritative servers (diana.ns.cloudflare.com, dilbert.ns.cloudflare.com) and two non‑Cloudflare servers (ns1.1reg.buzz, ns2.1reg.buzz), suggesting possible split‑hosting or recent changes to the resolution chain. No TLS certificate is presented for the host, meaning HTTPS connections would be unavailable or would trigger certificate errors, a typical characteristic of fraudulent domains.

Reputation services provide a consistent negative signal: Gridinsoft assigns a trust score of 0 / 100, and 14 of 95 security vendors on VirusTotal have flagged the domain as malicious. The domain appears on a single public blocklist and has been actively blocked by PhishDestroy, confirming that at least one anti‑phishing feed is already aware of its activity. The site is categorized as a “Crypto Scam” and the brand target is explicitly listed as PancakeSwap. Uncertainty remains regarding any active payload, command‑and‑control infrastructure, or the presence of malicious scripts because the site is currently offline and no page title or content hash has been published.

Defenders should therefore treat any traffic to the domain as hostile. Recommended actions include adding the IPv6 address and the fully qualified domain name to existing firewall and DNS filtering rules, updating endpoint and web‑gateway blocklists with the domain and its associated nameservers, and monitoring for any future resolution changes that might point to new IP addresses.