pancakesvswaffles[.]shop

This domain, pancakesvswaffles.shop, is currently active and engaged in brand impersonation targeting PancakeSwap, a decentralized finance platform. The threat type is classified as a crypto drainer, designed to illicitly transfer cryptocurrency assets from victims' wallets by mimicking legitimate services. As of the latest analysis, the domain remains operational and poses a high risk to users interacting with decentralized applications. Infrastructure analysis reveals that pancakesvswaffles.shop resolves to the IP address 13.248.243.5 and is registered through GoDaddy.com LLC, with a creation date of May 22, 2026, indicating a suspiciously forward-dated registration. The domain is flagged by 1 of 95 security vendors on VirusTotal, and it appears on three distinct security blocklists, including those maintained by PhishDestroy, MetaMask, and SEAL. The SSL certificate is issued by GoDaddy.com, specifically under the GoDaddy TLS Intermediate CA DV - R1v1, which does not mitigate the domain's malicious intent. The current status of pancakesvswaffles.shop remains active, with no indications of takedown or mitigation efforts. Users are strongly advised to avoid interacting with this domain, particularly those utilizing PancakeSwap or similar decentralized finance services. Immediate actions include blocking the domain at the network level, verifying the authenticity of any linked services through official channels, and employing wallet security measures such as hardware wallets or multi-signature authentication to prevent unauthorized transactions. Organizations should update their threat intelligence feeds to include this domain and its associated indicators of compromise to enhance detection and response capabilities.