pancakeswap1[.]com

This domain, pancakeswap1.com, was registered on August 03, 2025 through Internet Domain Service BS Corp. The authoritative name servers nolan.ns.cloudflare.com and pola.ns.cloudflare.com resolve the name to the Cloudflare edge address 188.114.97.3, which is announced by AS13335 in the United States. No TLS certificate is presented; the site is reachable only over HTTP, which reduces transport‑level trust. The page title returned from the live endpoint is the German phrase “Nur einen Moment…”, and the site is classified as a crypto‑scam that impersonates the PancakeSwap platform. VirusTotal analysis shows that two of ninety‑five scanning engines have flagged the domain, indicating a modest but non‑zero malicious reputation.

Independent threat‑intelligence feeds have listed the domain on a single security blocklist, and the PhishDestroy service has already blocked it. The domain remains active as of the report date, July 24, 2026. Analysis of the available indicators suggests that the infrastructure is intentionally hosted behind Cloudflare to hide the origin server while leveraging a reputable CDN. The lack of an SSL certificate and the generic page title provide limited forensic value, and no additional payload or URL paths have been disclosed, leaving the exact malicious payload uncertain.

Defenders should consider adding 188.114.97.3 and the domain name to network‑level deny lists, enforce HTTPS‑only policies for outbound web traffic, and monitor for any attempts to retrieve resources from the site. Continuous re‑scanning with multi‑vendor services is advised to capture any changes in detection scores, and any future appearance on additional blocklists should be treated as confirmation of malicious intent. Organizations that use PancakeSwap or related DeFi services should educate users about the risk of unsolicited redirects to domains such as pancakeswap1.com, and enforce strict validation of URLs before credential entry.