pancake[.]svvap[.]finance

The domain pancake.svvap.finance is a high-risk phishing site engaged in brand impersonation targeting PancakeSwap, a popular cryptocurrency exchange. It was designed to deceive users into believing they were interacting with the legitimate PancakeSwap platform, likely to steal credentials or funds through cryptocurrency scams. As of the latest verification, pancake.svvap.finance has been taken offline, though it previously posed a significant threat to unsuspecting users searching for the authentic PancakeSwap service.

Technical analysis reveals that pancake.svvap.finance was flagged by 14 of 95 security vendors on VirusTotal, including ADMINUSLabs, alphaMountain.ai, and ArcSight Threat Intelligence. The domain was registered through OwnRegistrar, Inc. on August 21, 2025, and resolved to the IP address 172.67.201.59, hosted on Cloudflare's infrastructure in the US. It appeared on three security blocklists—PhishDestroy, ScamSniffer, and PhishingDB—and used an SSL certificate issued by WE1. The site's nameservers were albert.ns.cloudflare.com and harmony.ns.cloudflare.com, and it returned an HTTP 530 status at the time of assessment.

Users who may have interacted with pancake.svvap.finance should immediately revoke any token approvals granted to unknown contracts and transfer remaining funds to a new, secure wallet. If credentials were entered, change passwords on the legitimate PancakeSwap platform and enable two-factor authentication. Report the domain to relevant authorities, such as the Anti-Phishing Working Group (APWG) or local cybercrime units, and consider submitting it to additional blocklists to prevent further abuse.