pancaksewap[.]co[.]com

The domain pancaksewap.co.com was registered on 2026-02-21 through Moniker Online Services LLC. It resolves to the IP address 172.67.132.2, which belongs to the Cloudflare network (AS13335) and is geolocated in the United States. The authoritative name servers are ns1.nic.co.com through ns4.nic.co.com. The SSL certificate presented is issued by Google Trust Services under the WE1 identifier, indicating a valid TLS handshake. Web probing shows an HTTP 302 redirect response and the final page title reads “Account Suspended”. The site is served over Cloudflare and supports HTTP/3, confirming the use of modern CDN infrastructure. VirusTotal analysis records a single positive detection out of 95 security vendors, while Gridinsoft assigns a trust score of 0 out of 100, reflecting a highly suspicious reputation. The observed characteristics align with a brand‑impersonation campaign targeting PancakeSwap. The domain appears on one security blocklist and is actively blocked by PhishDestroy, reinforcing the classification as a high‑risk impersonation vector. The combination of a newly created domain, a reputable TLS certificate, and a legitimate CDN can be used to increase credibility and lure victims. Uncertainty remains regarding the specific payload or credential‑harvesting mechanisms employed, as the redirected page currently displays only an “Account Suspended” message. Defenders should block the domain at perimeter and DNS layers, monitor outbound connections to the associated IP, and enforce strict URL filtering for any references to PancakeSwap. Continuous re‑evaluation is advised as additional detections may emerge.