VirusTotal
6 / 95
“$USDUC”
pancake-swap.digital — 内容不可用. 品牌冒充:PancakeSwap; 诈骗类型:Crypto Scam; Drainer: Wallet Connect Abuse. 证据摘要: VirusTotal 6/95 (alphaMountain.ai, BitDefender, CRDF, CyRadar, G-Data); PhishDestroy score 88/100. 注册商: PDR.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
Analysis indicates that the domain pancake-swap.digital was registered on July 30, 2025 through PDR Ltd. d/b/a PublicDomainRegistry.com. The authoritative nameservers are louis.ns.cloudflare.com and veronica.ns.cloudflare.com, pointing to Cloudflare's network. DNS resolution returns the address 172.67.163.228, which belongs to AS13335 Cloudflare, Inc. and is geolocated to the United States. No TLS certificate is presented, leaving the site without encryption. The page title reported by collectors is "$USDUC", and the site is classified as a crypto drainer employing a Wallet Connect abuse kit.
The threat is explicitly targeting the PancakeSwap brand, as indicated by the impersonation flag. Threat intelligence platforms have recorded six positive detections out of ninety‑five antivirus engines on VirusTotal, and the domain is listed on a single external blocklist, specifically PhishDestroy. Gridinsoft assigns a trust score of zero out of one hundred, reinforcing the malicious assessment. The overall risk rating is high, and the domain has been taken offline at the time of reporting. Defenders should treat any network traffic to or from 172.67.163.228 as potentially malicious, especially if it involves wallet‑connect protocols or attempts to interact with PancakeSwap‑related endpoints.
Blocking the domain at the DNS layer, adding it to local and upstream blocklists, and ensuring that endpoint protection solutions are updated to flag the observed VirusTotal detections will reduce exposure. Because the site lacks TLS, monitoring for clear‑text HTTP requests to this host can provide early indicators of compromise. Incident response teams should also correlate logs for any Wallet Connect calls that coincide with the domain’s activity window. Continuous monitoring of the registrar PDR Ltd. for new domains that resolve to the same Cloudflare IP range is advisable, as threat actors often reuse infrastructure.
针对该主机的爬虫与浏览器观察记录,以及针对“Keitaro”式流量分配系统的实时指纹检测。
扫描说明: unavailable: raw=connection_error; http=0; via=http_proxy; error=SOCKSHTTPConnectionPool(host='pancake-swap.digital', port=80): Max retries exceeded with url: / (Caused by NewConnection
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Edge-IP 声誉不属于此域。
louis.ns.cloudflare.comveronica.ns.cloudflare.comLocation describes the IP network.
11 recorded events. These records describe collected evidence, outgoing notifications and publication; they do not confirm a complete investigation or a takedown.
We scan suspicious URLs, inspect public results and send evidence through the appropriate abuse-reporting channels. The dated events above show what is recorded for this domain. The directory below explains the wider workflow.
Capture the rendered page, requests and visible infrastructure.
Compare the available engine results and retain the analysis timestamp.
Check whether Google currently lists the URL as unsafe.
Inspect a public scan and its recorded network and classification data.
Look for indicator references and related community intelligence.
Compare archived captures and preserve historical context.
Look for matching indicators and associated threat records.
Inspect certificate records and related hostnames.
Compare security resolver responses and record observed blocking.
Inspect the public DNS, TLS, HTTP and technology surface.
Security services used for scanning, reputation checks and reporting are listed below. A service being listed is not evidence that it received, accepted or acted on this particular domain. Recorded submissions appear in the notification history above.
已存储 83 个仿冒域名
1 条社区报告
类别PHISHING
The PhishFort Detection System has flagged this as a domain threat, classified as phishing. Threat detected at 2025-09-12T12:57:58.867Z.
由 1 名社区成员报告;首次发现于 2025年9月10日
如果您与此域交互、输入个人信息或连接加密货币钱包,请立即采取行动。以下资源可帮助您报告事件并保护自己。
选择您所在的国家/地区以获取 官方网络犯罪联系人 或 创建投诉草稿 →。
Template-based draft · optional AI wording assistance requires separate consent
使用存储的阻止列表、WHOIS、DNS 和公共扫描证据进行威胁分析
立即扫描将可疑域名提交至我们的威胁数据库——保护社区
报告最近的网络钓鱼报告和观察到的可用性变化
监控据估计 $51 billion 于2024年流入非法加密货币钱包(source). 如果你曾与 pancake-swap.digital — 立即行动。
据 联邦调查局,其中最重要的细节是交易数据:
0x5856...35985)pancake-swap.digital)即使你并不了解所有细节—— 不管怎样都要提交报告. 即使信息不完整,对调查仍有帮助。
A report is not a guarantee of recovery or investigation, but prompt, accurate transaction data can help authorities and service providers trace the incident.