# pancake-swap.dream.space — SUSPICIOUS

> PhishDestroy flags pancake-swap.dream.space as a crypto drainer impersonating PancakeSwap. 4 of 95 VirusTotal scanners detect it; avoid and verify before you.

## Summary
PhishDestroy identifies pancake-swap.dream.space as an active crypto-draining site that poses as PancakeSwap to trick users into connecting their wallets. Once connected, the page silently approves malicious token contracts that drain tokens automatically, often leaving victims with empty balances in minutes. The domain was registered on November 8, 2024 through GoDaddy.com, LLC and resolves to IP 104.18.20.20 with a Google Trust Services SSL certificate, giving it a veneer of legitimacy that can fool even careful visitors.  This domain is flagged by 4 out of 95 VirusTotal security vendors, a clear early-warning signal that most scanners have not yet caught up with its recent deployment. Its recent creation date and low detection rate indicate it is part of a fast-moving campaign rather than an old, well-known scam. The choice of dream.space as the second-level domain is designed to look like an official subdomain, exploiting the PancakeSwap brand to lower user suspicion.  If you visited pancake-swap.dream.space, immediately revoke any wallet approvals in your wallet’s settings or use a dedicated revoke tool such as revoke.cash. Disconnect the site, clear your browser cache, and scan your device for malware. Report the domain to PhishDestroy and your wallet provider so others can be warned. Only interact with PancakeSwap through its verified domains—never via unexpected subdomains or shortened links.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: PancakeSwap

## Domain Intelligence
- Registered: 2024-11-08 11:42:24
- Registrar: GoDaddy.com, LLC
- IP: 104.18.20.20

## Detection Status
- VirusTotal: 4 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/0c5bd137-255e-443b-b889-fd91fe50d7dc
- PhishDestroy: https://phishdestroy.io/domain/pancake-swap.dream.space/
- LLM endpoint: https://phishdestroy.io/domain/pancake-swap.dream.space/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/pancake-swap.dream.space/
Last updated: 2026-03-30