VirusTotal
16 / 89 engine detections
Buka laporanponcakeswap.finance: Peniruan Cloudflare, terdeteksi oleh PhishDestroy pada 2026-08-31. Risiko: kritis (100/100). Registrar: Dynadot. Status: Terakhir diketahui aktif. Hosting: Amazon.com, Inc. PhishDestroy mengirim 1 laporan penyalahgunaan. VirusTotal: 16/89 mesin menandainya. Tercantum di Spamhaus DBL. Jangan masukkan kredensial dan jangan hubungkan dompet.
“CloudFlare - Verify that you are a human”
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@dynadot.com.
The latest stored availability evidence still shows the domain reachable; 1 month has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
Peniruan Cloudflare: poncakeswap.finance — Terakhir diketahui aktif (HTTP 301). Ringkasan bukti: VirusTotal 16/89 (alphaMountain.ai, BitDefender, Chong Lua…
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
16 / 89 engine detections
Buka laporan1 threat-system alert
Buka laporanDBL_PHISH
4 community references
Buka laporanprovider verdict: clean
Buka laporan80/100
Buka laporanTidak ada penanda ancaman
Buka laporanTidak ada penanda berbahaya
Buka laporanHasil mencerminkan waktu pengumpulan setiap sumber. Nol deteksi tidak menjamin keamanan. Referensi OTX adalah publikasi komunitas.
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | pancackeswap.org |
malicious | Sinkholed |
PhishDestroy threat report
poncakeswap.finance is an impersonation phishing page that presents a fake Cloudflare check titled "CloudFlare - Verify that you are a human". The domain is a one-letter misspelling of PancakeSwap, so it targets DeFi traders who mistype the exchange's name or click a lookalike link. PhishDestroy first saw it on 2026-08-31. On 2026-10-19 it was still online and serving a redirect.
Fake Cloudflare checks borrow the familiar "verify you are human" step so visitors expect an extra click and lower their guard. Behind that gate, schemes like this usually do one of two things. Some send the victim to a copied crypto interface that asks them to connect a wallet and sign transactions or approvals. Others ask the visitor to run "verification" commands on their own computer. On a domain built to catch PancakeSwap users, the realistic losses are tokens drained from a connected wallet or a compromised device.
On 2026-09-12, 16 of 89 VirusTotal engines flagged the domain. Those engines include BitDefender, ESET, Fortinet, Forcepoint ThreatSeeker, alphaMountain.ai, CRDF, CyRadar and Chong Lua Dao. Spamhaus lists it in its DBL as a phishing domain. MetaMask, ScamSniffer and SEAL have also blocklisted it, which matters because those lists sit in front of wallet users. Four AlienVault OTX pulses reference the domain, so other researchers have tracked it independently.
The domain was registered through Dynadot Inc on 2026-08-28, only three days before PhishDestroy detected it. That short gap points to a throwaway domain built for a quick campaign. It is hosted on Amazon.com, Inc. infrastructure in the US and uses a free Let's Encrypt certificate. The padlock in the browser therefore proves nothing about who runs the site.
If you connected a wallet here, revoke every token approval granted to unfamiliar contracts with a trusted approval-checker. Move any remaining funds to a fresh wallet, and never share your seed phrase. If the page asked you to paste or run anything on your computer, disconnect the device, run a full malware scan and change passwords from a clean machine. Always reach PancakeSwap through a saved bookmark rather than typed or searched links. Defenders should block the domain at DNS and proxy level and alert users that real Cloudflare checks never ask for wallet connections or commands.
Tidak. PhishDestroy mengklasifikasikan poncakeswap.finance sebagai Peniruan Cloudflare (risiko: kritis, 100/100); pertama kali terdeteksi pada 2026-08-31. VirusTotal: 16/89 mesin menandainya. Tercantum di Spamhaus DBL. Anggap situs ini tidak aman.
Tidak. Jangan hubungkan dompet, menandatangani pesan, atau menyetujui token di poncakeswap.finance. Situs phishing meminta persetujuan (approve, setApprovalForAll, Permit2) yang memungkinkan operator memindahkan aset Anda, dan transaksi yang sudah dikonfirmasi tidak dapat dibatalkan.
Ganti setiap kata sandi yang Anda masukkan di sana dan aktifkan autentikasi dua faktor. Jika Anda menghubungkan dompet atau menandatangani sesuatu, cabut persetujuannya dan pindahkan dana yang tersisa ke dompet baru; jangan pernah membagikan frasa pemulihan. Bantuan langkah demi langkah: panduan darurat.
Terakhir diperiksa
Untuk gTLD ini, registrar di atas beroperasi berdasarkan perjanjian akreditasi ICANN. Tautan di bawah ini menyediakan jadwal biaya resmi dan panduan kepatuhan terkini terkait penyalahgunaan DNS.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Reputasi Edge-IP tidak dikaitkan dengan domain ini.
ns1.dyna-ns.netns2.dyna-ns.netLokasi menggambarkan jaringan IP.
59af53172c5b884671e3ae57a4680ae6c06cabf9d36a953c703d65fc3cdb84a5pancackeswap.org*.pancackeswap.orgMetadata sertifikat yang disimpan. Tanggal sertifikat tanpa zona waktu ditampilkan sebagaimana disimpan. Enkripsi transport tidak membuktikan bahwa situs tersebut tepercaya.
Google PageSpeed Insights — audit performa seluler untuk poncakeswap.finance · checked Aug 31, 2026
Waktu perkiraan menggambarkan rentang pengamatan. Waktu ini tidak membuktikan tindakan registrar atau saat pasti situs menjadi tidak tersedia.
Bandingkan apa yang diterima browser dan crawler, serta periksa perutean trafik Keitaro.
poncakeswap.finance
Pengamatan halaman, jaringan, dan pemindai yang tersimpan, dikelompokkan berdasarkan sumber dan waktu pengamatan.
Teramati: · Retrieved:
| Uuid | 01a056d2-8cc1-72fd-83fa-4cbd50e5b310 |
|---|---|
| Final url | https://pancackeswap.org/ |
| Status | 200 |
| Dialihkan | off-domain |
| Redirects | [
{
"to": "https://poncakeswap.finance/",
"from": "http://poncakeswap.finance/",
"status": 307
},
{
"to": "https://pancackeswap.org/",
"from": "https://poncakeswap.finance/",
"status": 301
}
] |
| Ip | 104.21.61.103 |
| Contacted domains | [
"www.cloudflare.com",
"www.serviops.ca",
"static.cloudflareinsights.com",
"poncakeswap.finance"
] |
| Contacted IP addresses | [
"104.16.123.96",
"172.67.128.38",
"104.16.80.73",
"104.21.61.103",
"54.215.31.113"
] |
| Asns | [
"13335",
"16509"
] |
| Countries | [
"US"
] |
| Document hash | f1f0f53247e16d8af54688382b2b2e88ae0d19cc2dfeb5c7b8810603f1ffc331 |
| Globals | [
"ontouchcancel",
"ontouchend",
"ontouchmove",
"ontouchstart",
"__cfBeacon",
"capchaForm"
] |
| Cookie | [
"__cf_bm"
] |
| Tls | {
"san": [
"pancackeswap.org",
"*.pancackeswap.org"
],
"cipher": "AES_128_GCM",
"issuer": "WE1",
"subject": "pancackeswap.org",
"protocol": "QUIC",
"valid_to": "2026-11-18T08:16:18Z",
"valid_from": "2026-08-20T07:17:27Z"
} |
| Usia domain (hari) | 1888 |
| Apex age days | 1888 |
| Tls age days | 11 |
| Masa berlaku TLS (hari) | 90 |
| Requests | 5 |
| Provider verdicts | {
"engines": {
"tags": [
"urlscan-ml",
"urlscan-ml-60c5e22"
],
"score": 98,
"malicious": true
},
"overall": {
"score": 0,
"malicious": false
}
} |
| HTTP headers | {
"server": "cloudflare",
"content-type": "text/html; charset=UTF-8",
"x-powered-by": "PHP/8.4.24"
} |
Teramati: · Retrieved:
| Uuid | cb029742-69cf-4326-8d17-5b5033bc433a |
|---|---|
| Final url | https://pancackeswap.org/ |
| Status | 200 |
| Dialihkan | off-domain |
| History | [
{
"url": "http://poncakeswap.finance/",
"status": 307
},
{
"url": "https://poncakeswap.finance/",
"status": 301
},
{
"url": "https://pancackeswap.org/",
"status": 200
}
] |
| DOM structure hash | 672002ed384b67b1e4ba7cd3632e729c06c0cef911aa80343dc0c50403f2a21d |
| Document hash | 6775776afb640347333a4a92b64a03c7730145084874ab331e38f77c56f09b79 |
| Phishing v2 | [
"phishing"
] |
| Radar rank | {
"bucket": ">200000"
} |
| Catatan DNS | [
{
"name": "pancackeswap.org",
"type": "A",
"value": "188.114.96.0"
},
{
"name": "pancackeswap.org",
"type": "A",
"value": "188.114.97.0"
},
{
"name": "pancackeswap.org",
"type": "AAAA",
"value": "2a06:98c1:3120::"
},
{
"name": "pancackeswap.org",
"type": "AAAA",
"value": "2a06:98c1:3121::"
}
] |
| DNSSEC valid | false |
| Ip | 188.114.96.0 |
| Catatan pendaftaran | {
"registrar": "Web Commerce Communications Limited dba WebNic.cc",
"created": "2025-09-23T11:29:15Z",
"updated": "2026-08-20T08:06:54Z",
"expires": "2026-09-23T11:29:15Z",
"nameservers": [
"addilyn.ns.cloudflare.com",
"marvin.ns.cloudflare.com"
]
} |
Teramati: · Retrieved:
| Vendor result counts | {
"timeout": 0,
"harmless": 45,
"malicious": 14,
"suspicious": 2,
"undetected": 31
} |
|---|---|
| Vendor labels | {
"CRDF": "malicious",
"ESET": "suspicious",
"VIPRE": "phishing",
"G-Data": "phishing",
"Lionic": "phishing",
"Sophos": "phishing",
"CyRadar": "phishing",
"Webroot": "malicious",
"Fortinet": "phishing",
"SOCRadar": "phishing",
"Kaspersky": "phishing",
"LevelBlue": "phishing",
"Gridinsoft": "suspicious",
"BitDefender": "phishing",
"alphaMountain.ai": "phishing",
"Forcepoint ThreatSeeker": "phishing"
} |
| Reputation | 0 |
| Dibuat | 2023-02-28T00:00:00Z |
| Updated | 2023-02-28T00:00:00Z |
| Pertama terlihat | 2024-01-19T23:06:58Z |
| Catatan DNS | [
{
"ttl": 10800,
"type": "SOA",
"rname": "hostmaster.poncakeswap.finance",
"value": "ns1.dyna-ns.net"
},
{
"ttl": 10800,
"type": "NS",
"value": "ns2.dyna-ns.net"
},
{
"ttl": 10800,
"type": "NS",
"value": "ns1.dyna-ns.net"
},
{
"ttl": 10800,
"type": "A",
"value": "54.215.31.113"
}
] |
| Dns at | 2026-10-20T06:06:01Z |
| Jarm | 29d29d00029d29d00041d41d00041d132d614bbd1220c5b7764d943e573ac6 |
| Certificate | {
"san": [
"*.poncakeswap.finance",
"poncakeswap.finance"
],
"issuer": "Let's Encrypt / YR2",
"serial": "6f6b8f3b248d4eafcf248a049699879d60b",
"sha256": "59af53172c5b884671e3ae57a4680ae6c06cabf9d36a953c703d65fc3cdb84a5",
"subject": "poncakeswap.finance",
"valid_to": "2026-11-26T15:41:39Z",
"valid_from": "2026-08-28T15:41:40Z"
} |
| Registry data | {
"status": [
"transfer prohibited"
],
"events": {
"expiration": "2027-08-28T16:12:49Z",
"last changed": "2026-09-24T07:09:17Z",
"registration": "2026-08-28T16:12:49Z",
"registrar expiration": "2027-08-28T16:12:49Z",
"last update of RDAP database": "2026-10-16T07:36:06Z"
},
"registrar": "DYNADOT LLC",
"registrar_iana_id": "472"
} |
Perubahan bertanggal yang disimpan oleh pemantau dan kolektor sumber. Pengamatan terbaru ditampilkan lebih dulu; status sumber bukan bukti bahwa situs telah diturunkan.
Tidak diketahui→redirected
http_redirect
Tidak diketahui→redirected
http_redirect
Tidak diketahui→redirected
http_redirect
Tidak diketahui→redirected
http_redirect
Tidak diketahui→redirected
http_redirect
Tidak diketahui→redirected
http_redirect
Tidak diketahui→redirected
http_redirect
Tidak diketahui→redirected
http_redirect
Tidak diketahui→redirected
http_redirect
Tidak diketahui→redirected
http_redirect
Tidak diketahui→redirected
http_redirect
Tidak diketahui→redirected
http_redirect
Tidak diketahui→redirected
http_redirect
Tidak diketahui→redirected
http_redirect
Tidak diketahui→redirected
http_redirect
Tidak diketahui→redirected
http_redirect
Tidak diketahui→redirected
http_redirect
Tidak diketahui→redirected
http_redirect
redirected
http_redirect
Dapat dijangkau
4 community references
Lihat sumberTidak ada penanda ancaman
Lihat sumber16/89 engine detections
Lihat sumberPD-20260831-32742F
poncakeswap.finance
Lihat sumberPage captured
Lihat sumber142 domain serupa tersimpan
Menampilkan 100 dari 142
2 laporan komunitas
KategoriPHISHING
The PhishFort Detection System has flagged this as a domain threat, classified as phishing. Associated tags: brand impersonation. Threat detected at 2024-01-20T10:06:36.429Z.
PD-20260831-32742F Recipient: abuse@dynadot.com Registrar: Dynadot LLC / Dynadot Inc (United States) Policy Violations: Acceptable Use forbids illegal content; Spam & Abuse Policy prohibits phishing, fraud, malware; Dynadot may disable DNS and suspend domains Applicable Laws: CFAA 18 U.S.C. §1030, Wire Fraud 18 U.S.C. §1343, CAN-SPAM Act
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
IC3 does not accept attachments. Keep original evidence for investigators. IC3 guidance
Federal tips line1-800-CALL-FBICurrent service: Report Fraud. England, Wales and Northern Ireland. Scotland: 101.
Contact centre0300 123 2040Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Template-based draft · optional AI wording assistance requires separate consent
Pilih langkah yang sesuai dengan informasi yang Anda bagikan. Simpan salinan laporan ini bersama catatan Anda sendiri.
Berhenti menggunakan situs yang mencurigakan. Buka layanan yang asli melalui aplikasi resminya atau alamat yang sudah Anda percayai.
Simpan email, tanda terima, pesan, dan tangkapan layar asli di tempat yang aman. Kronologi faktual membantu otoritas penerima memahami apa yang terjadi. IC3 evidence guidance ↗
poncakeswap.finance)Meskipun kamu belum mengetahui semua detailnya — tetap saja ajukan laporan. Informasi yang tidak lengkap tetap dapat membantu penyelidikan.
Laporan tidak menjamin dana akan kembali atau kasus akan diselidiki, tetapi data transaksi yang akurat dan segera disampaikan dapat membantu pihak berwenang dan penyedia layanan melacak insiden tersebut.
Further guidance: NIST · phishing responseFBI IC3 · reports & evidenceFTC · recovery scams
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanLaporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauPantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive
Laporan ini menggabungkan tangkapan halaman yang disimpan, catatan pendaftaran dan jaringan, hasil pemindai, serta riwayat pelaporan PhishDestroy. Setiap sumber menyimpan tanggal pengamatannya sendiri. Buka laporan sumber untuk memeriksa hasil aslinya.
Analisis berbantuan AI ditulis pada . Analisis ini menggambarkan bukti yang tersedia saat itu; hasil pemeriksaan sumber berikutnya dapat berbeda.
Tangkapan mendokumentasikan apa yang ditampilkan. Hasil pemindai mencatat penilaian penyedia tersebut pada saat pemeriksaan. Baik sertifikat yang valid maupun hasil tanpa deteksi tidak menjamin keamanan.