pancakesvvap[.]sbs

Analysis indicates that the domain pancakesvvap.sbs is actively engaged in a high‑risk brand‑impersonation campaign targeting PancakeSwap. The site returned an HTTP 403 response, suggesting deliberate restriction of direct content access while still serving malicious intent. Reputation services have assigned a Gridinsoft trust score of 0 out of 100, and three security blocklists currently list the domain as hostile. The threat type is identified as brand_impersonation and the risk level is rated high.\n\nInfrastructure analysis reveals that the domain was registered on May 25, 2026 through Global Domain Group LLC. It is served by Cloudflare’s network, using the nameservers alec.ns.cloudflare.com and melany.ns.cloudflare.com, and resolves to IP address 104.21.9.59, which is geolocated to Canada within Cloudflare, Inc. The SSL certificate is issued by Let\'s Encrypt and bears the identifier E8, confirming that the site is using a legitimate TLS provider to mask its malicious purpose.\n\nThreat indicators include placement on three security blocklists and active blocking by PhishDestroy, MetaMask, and SEAL. VirusTotal analysis shows that 3 of 95 scanned security vendors flagged the domain, reinforcing the suspicion of malicious activity. The combination of a zero trust score, blocklist presence, and targeted brand impersonation underscores the elevated danger posed by this infrastructure.\n\nDefenders should immediately add pancakesvvap.sbs to blocklists and enforce endpoint filtering to prevent resolution of its IP address 104.21.9.59. Network monitoring tools ought to flag any outbound connections to Cloudflare‑hosted IPs that match this pattern. User education campaigns should alert stakeholders to the risk of counterfeit PancakeSwap interfaces and advise verification of URLs before credential entry. Continuous re‑evaluation is recommended, as additional intelligence may emerge regarding payload delivery or credential harvesting mechanisms.