app-pancake-vs9[.]com

This domain is flagged as a high-confidence credential harvesting site targeting users of PancakeSwap, a decentralized exchange platform. The site mimics the legitimate PancakeSwap interface to trick visitors into entering wallet recovery phrases, private keys, or login credentials. Once submitted, these sensitive details are transmitted to attacker-controlled infrastructure, enabling immediate theft of cryptocurrency assets. The impersonation extends to visual design, URL structure, and branding elements, making it difficult for non-technical users to detect the deception without prior warning. Analysis indicates the domain was registered on October 09, 2025, through NiceNIC International Group Co., Limited, a registrar frequently associated with phishing infrastructure. At the time of detection, the domain resolved to IP address 172.67.185.162 and was flagged by 14 out of 95 security vendors on VirusTotal, including multiple leading enterprise and consumer security engines. The domain appears on one active security blocklist and has been assigned a Gridinsoft trust score of 0/100, confirming its malicious classification. Infrastructure analysis reveals the use of Cloudflare IP space, a common tactic to obscure hosting origin and evade takedown efforts. Users who visited app-pancake-vs9.com and entered any sensitive information—such as wallet recovery phrases, private keys, or passwords—should assume full compromise of their cryptocurrency holdings. Immediate action is required: transfer all assets to a new, secure wallet using a clean device. Do not reuse the compromised wallet or any credentials entered on the site. Monitor transaction history for unauthorized activity and report the incident to relevant blockchain security teams. Additionally, scan all devices used to access the site for malware, as credential harvesters often deploy secondary payloads. If browser sessions were active during the visit, clear all stored data, including cookies and cached files, to prevent session hijacking.