pancakeswapd[.]github[.]io

The domain pancakeswapd.github.io is currently active and classified as a high‑risk brand‑impersonation site targeting PancakeSwap. The page title returned by the server is "PancakeSwap™ | Home Official Site," indicating an attempt to masquerade as the official PancakeSwap landing page. The domain was registered on April 19, 2026 through GitHub, Inc., and resolves to the GitHub Pages IP address 185.199.108.153, located in the United States. TLS is provided by a Let’s Encrypt R12 certificate and the site presents HSTS headers, but the underlying infrastructure includes Mobirise, Varnish, Bootstrap, Fastly, and standard GitHub Pages components. Reputation services rate the site poorly, with Scamadviser reporting a trust score of 1/100 and Gridinsoft a score of 0/100. VirusTotal scans show 19 of 94 security vendors flagging the domain, and it appears on one public blocklist. PhishDestroy has already blocked the host. Nameserver information is unavailable (NS_NOT_FOUND). While the exact malicious payload has not been observed, the combination of a recent domain creation, low reputation scores, multiple vendor detections, and the explicit brand‑impersonation label provides sufficient evidence for defensive action. Organizations should block traffic to pancakeswapd.github.io at perimeter defenses, update detection rules to include the host, and monitor for any related C2 activity originating from the 185.199.108.153 address. Continuous monitoring of GitHub Pages infrastructure for similar impersonation attempts is recommended.