pancake-finance-summer[.]com

Analysis of pancake-finance-summer.com, observed on July 24 2026, indicates that the domain is being used to impersonate PancakeSwap in a crypto‑scam campaign. The domain was registered on 9 September 2025 through ERANET INTERNATIONAL LIMITED and is hosted on Cloudflare infrastructure (AS13335) with the sole A record pointing to 172.67.186.110, a Cloudflare‑owned address located in the United States. DNS resolution is served by the Cloudflare nameservers clara.ns.cloudflare.com and keanu.ns.cloudflare.com. No TLS certificate is present, and HTTP requests return no response because the site has been taken offline at the time of analysis.

Reputation services have flagged the domain on two public blocklists, specifically PhishDestroy and ScamSniffer, confirming its inclusion in anti‑phishing feeds. VirusTotal scans show that 11 of 95 security vendors have flagged the domain as malicious, reinforcing the classification as a crypto‑related fraud. The Gridinsoft trust score of 0 out of 100 further reflects the high confidence that the domain is hostile. The threat type is listed as brand impersonation targeting PancakeSwap, and the overall scam category is identified as a crypto scam.

While the underlying web content has not been captured, the available indicators—blocklist listings, multi‑vendor detections, low trust score, absence of a valid SSL certificate, and the use of a Cloudflare‑provided IP address—provide sufficient evidence for security teams to treat the domain as malicious. Defenders should ensure that the domain is added to local deny lists, monitor DNS queries for the associated IP address, and propagate the blocklist entries across perimeter security appliances. Continuous observation of the registrar ERANET INTERNATIONAL LIMITED and any future re‑activation of the domain is recommended, as threat actors may attempt to resurrect the site using the same infrastructure.