xn--panckswp-46gd6c[.]xn--finnchbrthbnb-y1kccb8fg0pub07afa432bha34ee079cjaed[.]pancakey[.]co[.]com

The domain xn--panckswp-46gd6c.xn--finnchbrthbnb-y1kccb8fg0pub07afa432bha34ee079cjaed.pancakey.co.com was registered on February 21, 2026 and is currently taken offline. Infrastructure analysis shows the domain resolves to IP address 104.26.1.132, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The SSL certificate presented is identified as type E6, indicating a valid TLS layer but offering no additional risk mitigation. The domain appears on a single security blocklist and has been explicitly blocked by PhishDestroy, confirming that at least one external feed considers it malicious.

VirusTotal records indicate that the domain was scanned by 93 antivirus and URL‑reputation vendors; none reported a detection at the time of the scan, though the absence of detections does not constitute evidence of safety. The threat classification supplied labels the activity as a crypto‑scam that impersonates PancakeSwap, targeting users of that DeFi platform. No public page title, Safe Browsing status, OTX indicator, or registrar details are available in the current intelligence set.

Because the domain is offline, immediate automated blocking of the hostname and its resolved IP is recommended, along with continued monitoring of any re‑registration attempts or related sub‑domains. Defenders should also update inbound filtering rules to include the observed blocklist entry and consider adding the IP range of Cloudflare‑hosted infrastructure to threat‑intel feeds for broader coverage. Ongoing vigilance is advised, as the under‑investigation status suggests that additional malicious activity could emerge if the operator reactivates the domain or deploys similar impersonation assets.