pancakeswup[.]co[.]com

The domain pancakeswup.co.com was created on February 21, 2026 via Moniker Online Services LLC. Its sole visible page title reads "PancakeSwap - Premium Franchised Breakfast Cafes," directly referencing the PancakeSwap brand. The threat is catalogued as brand_impersonation, assigned a high risk level, and remains active as of July 12, 2026.

Technical inspection shows the domain resolves to the IP address 188.114.97.3, which is announced by AS13335 Cloudflare, Inc. The service is fronted by Cloudflare and delivers traffic over HTTP/3, indicating modern protocol support. TLS termination is performed with a certificate issued by Google Trust Services under the WE1 identifier, providing a valid SSL chain. Authoritative name servers are listed as ns1.nic.co.com, ns2.nic.co.com, ns3.nic.co.com, and ns4.nic.co.com.

From a threat‑intel perspective, pancakeswup.co.com appears on a single security blocklist and is actively blocked by PhishDestroy. VirusTotal reports one detection out of ninety‑five scanning engines, and Gridinsoft assigns a trust score of 0 out of 100, reflecting a low confidence in legitimacy. These data points, together with the high‑risk classification, suggest the domain is part of a targeted brand‑impersonation campaign aimed at PancakeSwap users, although the limited number of vendor flags leaves some uncertainty about the exact payload or attack vector.

Defenders should immediately add pancakeswup.co.com to network deny lists and configure DNS sinkholing to prevent resolution. Continuous monitoring for additional domains that reuse the "pancakeswup" token or similar naming patterns is advised, as is inspection of outbound traffic for connections to the associated Cloudflare IP range. Because the site content has not been publicly analyzed, the precise phishing mechanism remains unknown, and organisations are encouraged to maintain endpoint telemetry and user‑education programs to mitigate potential credential‑theft attempts.