app-pancake-v8[.]com

Analysis indicates that app-pancake-v8.com was registered on 9 October 2025 through NiceNIC International Group Co., Limited and immediately pointed to Cloudflare’s edge network (AS13335) with the address 172.67.177.43. The domain’s nameservers, meadow.ns.cloudflare.com and yew.ns.cloudflare.com, confirm that the hosting provider is Cloudflare, a common platform for fast‑flux and impersonation campaigns. No TLS certificate is presented, meaning the site would have been served over plain HTTP, a typical trait of low‑trust malicious pages. The Gridinsoft trust score of 0 / 100 further reflects a lack of legitimacy.

The domain is explicitly listed as impersonating PancakeSwap, a well‑known decentralized exchange, and is classified as a crypto‑scam. Eight of ninety‑five VirusTotal scanners flagged the domain, and it appears on a single external blocklist. PhishDestroy has already taken the site offline, and the current HTTP status is offline, limiting immediate exposure but indicating that the infrastructure may be re‑used for future campaigns. Defenders should continue to block the IP 172.67.177.43 at perimeter firewalls and add app-pancake-v8.com to internal URL filtering policies.

Because the domain relies on Cloudflare’s shared infrastructure, monitoring for new subdomains or similar‑named domains that resolve to the same IP range is advisable. Threat‑intel feeds should be updated to reflect the brand‑impersonation indicator, and any future resolution of the domain should trigger an alert. Given the lack of TLS, the offline status, and the low trust score, the immediate risk is reduced, but the underlying tactics suggest a repeatable pattern that could reappear under a different domain name.