pancake-cooking-swap[.]com

The domain pancake-cooking-swap.com was registered on September 11, 2025 through ERANET INTERNATIONAL LIMITED and is currently hosted on Cloudflare infrastructure (AS13335) with the public address 188.114.97.3, which resolves to a United States location. The domain is configured with Cloudflare nameservers cory.ns.cloudflare.com and rosa.ns.cloudflare.com and does not present an SSL certificate, indicating that HTTPS was not enforced at the time of analysis. The sole page title observed for the site is "PancakeSwap Cooking Experience," which aligns with the declared brand target of PancakeSwap and the listed scam type of a crypto scam.

The domain appears on a single security blocklist and has been actively blocked by PhishDestroy, confirming that at least one external threat intelligence feed has flagged the site as malicious. VirusTotal scans show that three of ninety‑five security vendors flagged the domain, providing additional corroboration of its suspicious nature. The site’s current operational status is offline, preventing real‑time interaction but preserving the forensic evidence of its infrastructure.

While the available data confirms brand impersonation and a crypto‑related fraud motive, the exact content of the landing page, credential‑capture mechanisms, or any additional payloads have not been publicly disclosed, leaving those vectors uncertain. Defenders should continue to monitor the IP address 188.114.97.3 for any re‑use, enforce domain‑level blocking for pancake-cooking-swap.com across web gateways, and update detection signatures to include the observed page title and registrar details. Further investigation of the three VirusTotal detections may reveal specific malware families or phishing kits associated with the domain, aiding in broader attribution and remediation efforts.