fcd62793[.]pancakeswap-swap[.]pages[.]dev

This domain, fcd62793.pancakeswap-swap.pages.dev, posed a brand impersonation threat specifically targeting PancakeSwap, a decentralized cryptocurrency exchange platform. The site was designed to deceive users into believing they were accessing a legitimate PancakeSwap interface, likely to harvest login credentials, wallet private keys, or seed phrases. The domain utilized Cloudflare infrastructure for hosting and SSL certificate services, and employed HTTP/3 and HSTS technologies to appear authentic. At the time of analysis, the site was taken offline by Cloudflare, displaying a 'Suspected phishing site' warning page.

Analysis indicates strong evidence of malicious intent. VirusTotal flagged this domain with 1 out of 95 security vendors detecting it as malicious, confirming its threat status. The Gridinsoft trust score is 0 out of 100, indicating no credibility. The domain was registered through Cloudflare, Inc., and resolved to IP address 198.18.2.19, which is associated with Cloudflare's infrastructure. The site appeared on one security blocklist and was detected by PhishDestroy, a security tool. The SSL certificate was issued by Google Trust Services, a legitimate certificate authority, which is common among phishing sites to bypass basic security checks. The domain creation date is not explicitly provided, but its registration via Cloudflare's pages.dev service suggests it is a relatively new domain.

If a user visited this domain, immediate action is recommended. First, do not enter any credentials, private keys, or personal information if the site was still active. Change passwords for any associated PancakeSwap accounts and enable two-factor authentication. Monitor cryptocurrency wallets for unauthorized transactions and revoke any token approvals given to suspicious addresses. Run a full antivirus scan on the device used to access the domain. Report the incident to PancakeSwap's official security team and consider checking blockchain transaction histories for any signs of compromise. The domain is now offline, but users should remain vigilant against similar phishing attempts using variations of the PancakeSwap brand.