pancake-dex[.]xyz

This domain, pancake-dex.xyz, was registered on October 09, 2025 through PDR Ltd. d/b/a PublicDomainRegistry.com. The authoritative name servers are jerry.ns.cloudflare.com and maria.ns.cloudflare.com, indicating Cloudflare DNS hosting. DNS resolution points to IP address 162.159.140.229, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. No TLS certificate is presented; the site is accessible only via HTTP, confirming the lack of encryption. The page title observed at the time of capture reads “CZ 🔶 BNB on X: "@Tintinx2021 Market sentiments can swing quickly (especially in meme coins).

Eco systems don't change in a day. #BNB is strong." / X”, referencing Binance Coin and a Twitter‑style handle, which aligns with the impersonated brand PancakeSwap. The threat classification is a crypto‑related brand impersonation, listed as a Crypto Scam in the intelligence feed. Gridinsoft assigned a trust score of 0 out of 100, reflecting a high confidence in malicious intent. VirusTotal analysis returned six positive detections out of ninety‑five scanned engines, confirming that multiple security products flag the domain as malicious.

The domain appears on one external blocklist and is specifically blocked by the PhishDestroy service. The overall risk level is marked as elevated, and the current operational status is offline, indicating that the malicious site has been taken down or is otherwise unreachable. Defenders should continue to deny any network communication to 162.159.140.229 and to pancake-dex.xyz, add the domain and its IP to local blocklists, and monitor for newly registered domains that use the same registrar or Cloudflare name servers. Updating intrusion detection signatures to capture the observed page title string and the “pancake-dex.xyz” host pattern will aid in early detection of any resurgence. Continuous review of threat intelligence feeds for additional detections related to this infrastructure is recommended.