pancakeswrp[.]co[.]com

As of July 12, 2026, the domain pancakeswrp.co.com has been identified as a high-risk phishing site impersonating the well-known cryptocurrency platform, PancakeSwap. The domain has been active since its creation on February 21, 2026, suggesting a sustained campaign aimed at defrauding users. This domain has been flagged by PhishDestroy and appears on one security blocklist, indicating its malicious nature. The page title 'Account Suspended' is a common tactic used by phishers to create a sense of urgency and fear among potential victims, urging them to take immediate action, often by providing sensitive information or making unauthorized transactions. Analysis of the domain's infrastructure reveals that it resolves to the IP address 104.21.16.1, which is located in the United States and is associated with AS13335 Cloudflare, Inc. The domain is registered through Moniker Online Services LLC and uses Cloudflare's services, including HTTP/3, which can provide additional anonymity and resilience to the attackers. The SSL certificate is issued by Google Trust Services, which may lend a false sense of security to unsuspecting users. While the domain has only been flagged by 2 out of 95 security vendors on VirusTotal, this low detection rate does not guarantee safety; it is crucial for defenders to treat this domain with caution. Gridinsoft’s trust score of 0/100 further supports the domain's malicious intent. Defenders should ensure their network and endpoint security solutions are configured to block this domain and educate users about the risks of visiting unverified websites, especially those claiming to suspend or compromise accounts. Regular monitoring and updating of blocklists are recommended to mitigate potential threats posed by this and similar domains.