pancakeswap[.]finance-app-api-connect-v2-wallet[.]info

The domain pancakeswap.finance-app-api-connect-v2-wallet.info is a confirmed phishing site engaged in brand impersonation targeting PancakeSwap, a cryptocurrency exchange platform. It presents itself as an official PancakeSwap interface but is designed to deceive users into disclosing sensitive information or transferring funds to attacker-controlled wallets. No drainer kit was identified, but the site operates as a cryptocurrency scam. As of the latest verification, pancakeswap.finance-app-api-connect-v2-wallet.info has been taken offline.

Technical indicators confirm the malicious nature of the domain. VirusTotal reports 2 of 95 security vendors flagged pancakeswap.finance-app-api-connect-v2-wallet.info as malicious, including Fortinet and Trustwave. The domain was created on February 21, 2026, and resolves to the IP address 104.21.22.84, hosted on Cloudflare's infrastructure in the US (AS13335). It appears on one security blocklist, PhishDestroy, and uses an SSL certificate issued by WE1. The observed page title, 'Home | PancakeSwap,' reinforces its attempt to mimic the legitimate platform.

Users who interacted with pancakeswap.finance-app-api-connect-v2-wallet.info should immediately revoke any token approvals granted to unknown contracts and transfer remaining funds to a new, secure wallet. Enable two-factor authentication (2FA) on all cryptocurrency accounts and monitor for unauthorized transactions. Report the phishing domain to PancakeSwap's official security channels and submit it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group to aid in broader mitigation efforts.