general-webmail-solid-pancake-production[.]up[.]railway[.]app

The domain general-webmail-solid-pancake-production.up.railway.app is currently active and classified as a high-risk brand impersonation threat targeting PancakeSwap, a decentralized finance platform. This infrastructure is designed to deceive users into believing they are interacting with legitimate PancakeSwap services, potentially leading to credential theft or financial fraud. Analysis indicates the domain is flagged by 17 of 95 security vendors on VirusTotal, reflecting broad detection of malicious intent. It resolves to the IP address 69.46.46.108, hosted on AS400940 Railway, located in the United States. The domain appears on one security blocklist and is blocked by at least one threat intelligence provider. Its SSL certificate is issued by Let’s Encrypt (serial number E7), a common choice for both legitimate and malicious sites. Google Safe Browsing has explicitly flagged this domain as phishing infrastructure. Current status confirms the domain remains operational, posing an ongoing risk to users. Organizations and individuals are advised to block the domain and its resolving IP at the network perimeter. End users should avoid interacting with any communications or links associated with this domain. Security teams are recommended to monitor for related infrastructure, particularly those mimicking PancakeSwap or other decentralized finance platforms, and update detection rules to include this domain and its associated indicators of compromise.