app[.]web-pancakeswap[.]to

PhishDestroy identified the domain app.web-pancakeswap.to as a brand impersonation threat targeting PancakeSwap, a leading decentralized exchange. This phishing site was designed to deceive users into interacting with a fraudulent platform that mimics the legitimate PancakeSwap interface, potentially harvesting credentials or cryptocurrency assets. No specific drainer kit was identified, but the site's title, 'PancakeSwap: The Leading DEX Redefining DeFi Exchanges,' closely mirrors the official brand.

Technical indicators reveal that the domain was created on August 19, 2025, and registered through the Government of Kingdom of Tonga, an unusual registrar that may indicate an attempt to evade detection. The site resolved to IP address 95.129.233.228 and used a Let's Encrypt SSL certificate issued to R13. VirusTotal analysis shows that 13 out of 95 security vendors flagged this domain as malicious. Additionally, the domain appears on one security blocklist, and its current status is offline, indicating that it has been taken down.

The domain is now offline, likely due to reporting or automated takedown actions. However, users should remain vigilant as similar domains may appear. PhishDestroy recommends avoiding any interaction with app.web-pancakeswap.to and verifying PancakeSwap URLs through official channels. If users have already visited the site, they should change passwords and monitor accounts for unauthorized activity. Always check the full report for updated intelligence on this and related threats.