pancakeswapn[.]co[.]com

Domain pancakeswapn.co.com was registered on 21 February 2026 through Moniker Online Services LLC. The zone is hosted on Cloudflare (AS13335) and resolves to IP 104.21.54.2, which is served via HTTP/3. TLS termination is provided by Google Trust Services / WE1, indicating a valid certificate chain. The site returns an HTTP 302 redirect and displays the page title “Account Suspended”. The domain appears on a single security blocklist and is currently blocked by PhishDestroy. It is classified as a crypto‑related brand‑impersonation campaign targeting PancakeSwap users. Infrastructure analysis shows four generic NIC‑co.com nameservers (ns1‑ns4.nic.co.com) and a Gridinsoft trust score of 0/100. No malware detections have been reported by the 93 VirusTotal scanners, but the absence of detections does not confirm safety. The available evidence points to active use of the domain for fraudulent purposes, but the exact payload or phishing flow has not been observed. Defenders should add the domain to blocklists, monitor DNS queries for the listed IP and nameserver set, and enforce URL filtering for any URLs containing “pancakeswapn.co.com”. Continuous observation of traffic patterns and correlation with reported PancakeSwap credential theft incidents is recommended to confirm the scope of the campaign.