pancakeswap[.]finance-api-swap-portal-cdn[.]cloud

The domain pancakeswap.finance-api-swap-portal-cdn.cloud was registered on February 21, 2026 and is currently taken offline. The site was identified as a brand‑impersonation effort targeting PancakeSwap, with the page title "Home | PancakeSwap" indicating an attempt to mimic the legitimate service. Infrastructure analysis shows the domain resolves to IP address 188.114.96.3, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The SSL certificate presented is identified as "WE1", but no further validation details are available.

The domain appears on a single security blocklist and has been blocked by the PhishDestroy sinkhole, confirming that defensive controls have already taken action against it. VirusTotal reports that the domain was scanned by 93 vendors; none of the vendors flagged the host at the time of analysis, but the absence of detections does not constitute a safety assurance. The known scam type is classified as a crypto scam, consistent with the targeted brand.

Open questions remain regarding the specific phishing payload, any credential‑harvesting forms, or additional malicious infrastructure that may have been associated before takedown. Defenders should continue to monitor the associated IP address for any re‑use, enforce blocklisting of the domain across DNS filtering solutions, and update brand‑monitoring alerts for PancakeSwap to capture similar impersonation attempts. Evidence of the block by PhishDestroy and the presence on a blocklist should be logged in incident tracking systems, and any related traffic should be inspected for indicators of compromise.