pancakeswap[.]finance-api-connect-walletv2[.]com

Analysis of the domain pancakeswap.finance-api-connect-walletv2.com indicates it was actively impersonating PancakeSwap, a decentralized cryptocurrency exchange platform. The domain was registered on February 21, 2026, and resolved to IP address 172.67.184.252, hosted on Cloudflare's infrastructure (AS13335). At the time of assessment, six out of ninety-three security vendors on VirusTotal flagged the domain as malicious, while one security blocklist, PhishDestroy, had already listed it. The SSL certificate was issued by WE1, a provider commonly observed in both legitimate and fraudulent domains.

The domain's status is currently offline, suggesting takedown or abandonment following detection. Infrastructure analysis reveals the domain leveraged Cloudflare's services, which may have obscured direct hosting details and provided SSL termination. The combination of a PancakeSwap-related naming convention, cryptocurrency scam classification, and detection by multiple security vendors supports the conclusion that this domain was designed to deceive users into connecting wallets or disclosing sensitive credentials.

Defenders should treat any prior interaction with this domain as high-risk, particularly for users who may have engaged with wallet-connect or transaction prompts. While the domain is no longer resolving, historical DNS and WHOIS records should be preserved for forensic review. No further content analysis is available, as the site was not accessible at the time of this report.