pancakeswapfinance[.]world

This domain is flagged as an active brand impersonation threat targeting PancakeSwap, a decentralized finance platform. Analysis indicates the site is designed to deceive users into interacting with fraudulent smart contracts or disclosing sensitive wallet credentials, aligning with known crypto drainer tactics. The elevated risk classification stems from its deliberate mimicry of legitimate PancakeSwap branding, combined with technical indicators of malicious intent. Infrastructure analysis reveals multiple red flags. The domain pancakeswapfinance.world was registered on February 21, 2026, through OwnRegistrar, Inc., a registrar frequently associated with high-risk registrations. It resolves to the IP address 188.114.97.3, hosted on Cloudflare’s network (AS13335), which is commonly exploited to obscure malicious infrastructure. Security vendors on VirusTotal flag the domain as malicious, with 17 out of 95 engines detecting it as a threat. The SSL certificate, issued by Google Trust Services (WE1), provides encryption but does not validate legitimacy. Additionally, the domain appears on at least one security blocklist, and its page title, 'Un instant…,' suggests an attempt to evade detection or simulate a loading screen to mask malicious activity. Mitigation steps for users and organizations include immediate blocking of the domain at the network level to prevent access. Users should verify the authenticity of any PancakeSwap-related site by cross-referencing the official domain (pancakeswap.finance) and avoiding interactions with unofficial variants. Wallet providers and DeFi platforms are advised to integrate domain reputation checks into their security layers, flagging or restricting transactions involving known impersonation domains. For incident responders, the IP address 188.114.97.3 and registrar details (OwnRegistrar, Inc.) should be added to threat intelligence feeds for proactive monitoring. Given the domain’s creation date discrepancy (2026), further investigation into registration anomalies is recommended to identify potential broader campaigns.