pancakeswap[.]finance-v2-api-apps-wallets-connect[.]com

The domain pancakeswap.finance-v2-api-apps-wallets-connect.com is involved in a brand impersonation phishing scheme targeting users of the PancakeSwap cryptocurrency platform. This domain was designed to deceive users into believing it is associated with the legitimate PancakeSwap service. The threat level for this domain is considered elevated, and it has been taken offline to prevent further harm.

Technical details indicate that 3 of 95 security vendors on VirusTotal, including alphaMountain.ai, ESET, and Fortinet, have flagged pancakeswap.finance-v2-api-apps-wallets-connect.com as malicious. The domain was registered through mat bao corporation on August 26, 2025, and resolves to the IP address 172.67.193.16, located in the US under AS13335 Cloudflare, Inc. It appears on one security blocklist, specifically PhishDestroy, and has a Gridinsoft trust score of 0 out of 100. The domain did not have an SSL certificate issued, which further questions its legitimacy.

To protect against potential threats posed by pancakeswap.finance-v2-api-apps-wallets-connect.com, users should revoke any token approvals associated with the domain and move funds to a secure wallet. If credentials were provided, it is advisable to change passwords immediately and enable two-factor authentication to bolster account security. Users should also monitor for any unauthorized transactions and report phishing attempts to the relevant authorities or platforms, such as the Anti-Phishing Working Group (APWG).