pancake20[.]com

PhishDestroy has identified pancake20.com as an elevated-risk brand impersonation threat, specifically targeting PancakeSwap users with a fake Pancakeswap V4 login page designed to steal credentials and possibly deploy crypto drainers. The domain is now offline but may reappear under similar names. Security analysts rate this as a significant threat due to the sophistication of the impersonation and the high value of the targeted brand.

Technical indicators paint a clear picture of malicious intent. VirusTotal flags this domain with 7 out of 95 security vendors marking it as malicious, while Google Safe Browsing specifically labels it as phishing. The domain was registered on April 22, 2025 through Gname.com Pte. Ltd., a registrar often associated with fraudulent domains, and resolves to IP address 103.174.136.170. It appears on one security blocklist and uses a Let's Encrypt SSL certificate (R13) to appear legitimate. The page title, Pancakeswap V4, is a direct attempt to mimic the legitimate PancakeSwap platform.

Users who may have interacted with pancake20.com should immediately change their PancakeSwap passwords and enable two-factor authentication on all associated accounts. Never enter seed phrases or private keys on any site accessed through unsolicited links. Always verify URLs by manually typing the official domain (pancakeswap.finance) into the browser. Report any suspected phishing domains to PhishDestroy and to the legitimate brand's security team to help protect the broader community from these evolving threats.