pancakedexswap[.]org

This domain, pancakedexswap.org, is identified as a brand impersonation threat specifically targeting PancakeSwap, a decentralized exchange operating on the BNB Chain. Analysis indicates the site was designed to replicate the legitimate PancakeSwap interface, likely to facilitate fraudulent transactions or deploy crypto-draining scripts. The page title, 'PancakeSwap: BNB Chain Swap DEX Peak,' further reinforces the attempt to mislead users into believing they are interacting with the official platform, increasing the risk of unauthorized asset transfers or credential harvesting. Infrastructure analysis reveals multiple high-confidence indicators of malicious activity. The domain was registered on March 01, 2025, through Web Commerce Communications Limited, a registrar frequently associated with suspicious registrations. It resolves to the IP address 172.67.173.75 and is currently flagged by 11 out of 95 security vendors on VirusTotal, including detection as a phishing or impersonation threat. Additionally, the domain appears on one security blocklist and has been taken offline, though its prior activity remains a concern for users who may have engaged with it. Users who visited pancakedexswap.org should take immediate corrective actions to mitigate potential risks. Any interaction with the site, such as connecting a wallet or entering credentials, may have exposed sensitive information or authorized malicious transactions. Affected individuals should revoke any active wallet permissions associated with the domain, monitor their accounts for unauthorized activity, and consider replacing compromised wallets or credentials. Additionally, scanning connected devices for malware is recommended to ensure no residual threats persist from the interaction.