pancakesresolvelive[.]app

This domain, pancakesresolvelive.app, is identified as a brand impersonation threat targeting PancakeSwap, a decentralized finance platform. Analysis indicates the site was designed to mimic legitimate PancakeSwap interfaces, likely to deceive users into disclosing sensitive credentials or transferring assets under false pretenses. No specific drainer kit signatures were detected in the available telemetry, but the domain’s infrastructure aligns with known phishing patterns observed in cryptocurrency-related fraud campaigns.

Infrastructure analysis reveals the domain was registered on February 21, 2026, through NiceNIC International Group Co., Limited. It resolves to the IP address 188.114.96.3, a Cloudflare-associated endpoint, and is currently flagged by 6 out of 95 security vendors on VirusTotal. The domain appears on one security blocklist and was blocked by at least one real-time threat intelligence feed. Its SSL certificate is issued by Google Trust Services, and the page title "Just a moment..." suggests the use of Cloudflare’s interstitial or challenge page, a common tactic to obscure malicious content from automated scanners.

As of the latest assessment, pancakesresolvelive.app has been taken offline, reducing immediate exposure to end users. However, residual risk persists due to the domain’s recent registration and the potential for reactivation or migration to alternative infrastructure. Organizations and users are advised to monitor for related indicators, including the IP address and registrar details, and to implement domain-based blocking at the network level. Continued vigilance is recommended, particularly for entities operating in the decentralized finance sector, as threat actors frequently reuse infrastructure for subsequent campaigns.