pancakeswap-chain[.]live

This domain, pancakeswap-chain.live, was registered on 21 February 2026 and currently resolves to the IP address 104.21.22.116, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The SSL certificate presented for the host is identified as “WE1”, indicating the use of a publicly‑available certificate rather than a brand‑validated credential. VirusTotal reports that 13 of 95 security vendors have flagged the domain as malicious, aligning with its classification as a crypto‑related scam that impersonates the PancakeSwap platform. The domain appears on a single external blocklist and has been actively blocked by the PhishDestroy service.

AlienVault OTX has recorded the domain in one threat‑intelligence pulse, further corroborating its malicious intent. The site’s status is listed as offline at the time of this assessment, suggesting that mitigation actions have removed public access. The public page title and visual content have not been captured, so the precise method of brand mimicry remains unverified.

While the infrastructure points to a typical Cloudflare front‑end, the short lifespan of the domain and the convergence of multiple independent detections indicate a purposeful brand‑impersonation campaign targeting cryptocurrency users. Defenders should continue to monitor for replica domains that reuse the same hosting provider or certificate patterns, add the observed IP and domain to internal blocklists, and apply brand‑monitoring rules for PancakeSwap to detect future attempts. Because the domain is already taken offline, immediate remediation focuses on ensuring that any cached references are purged and that downstream security products are updated with the observed indicators of compromise.