xn--pnckswp-2fgcd6c[.]xn--finnchbrthbnb-y1kccb8fg0pub07afa432bha34ee079cjaed[.]search-10m[.]co[.]com

The domain xn--pnckswp-2fgcd6c.xn--finnchbrthbnb-y1kccb8fg0pub07afa432bha34ee079cjaed.search-10m.co.com is a confirmed phishing site impersonating the cryptocurrency platform PancakeSwap. It operates as a brand impersonation scam targeting users with a fraudulent interface designed to steal cryptocurrency assets. No drainer kit was identified, but the site poses an elevated risk due to its deceptive design and active exploitation of the PancakeSwap brand. As of the latest verification, xn--pnckswp-2fgcd6c.xn--finnchbrthbnb-y1kccb8fg0pub07afa432bha34ee079cjaed.search-10m.co.com has been taken offline.

Technical indicators reveal limited but notable detection: 2 of 95 VirusTotal security vendors flagged the domain, including AutoShun and Trustwave. The domain was created on February 21, 2026, and resolves to the IP address 172.67.75.160, hosted on Cloudflare's infrastructure in the US. It appears on one security blocklist, PhishDestroy, and holds a Gridinsoft trust score of 0/100. The SSL certificate is issued by E6, and the observed page title was 'PancakeSwap - Ultimate DIY Pancake Bar | Custom Pancakes in Baton Rouge', a clear mismatch for a cryptocurrency platform.

Users who interacted with xn--pnckswp-2fgcd6c.xn--finnchbrthbnb-y1kccb8fg0pub07afa432bha34ee079cjaed.search-10m.co.com should immediately revoke any token approvals granted to unknown contracts and transfer remaining funds to a new wallet. Enable two-factor authentication on all cryptocurrency accounts and monitor for unauthorized transactions. Report the phishing domain to Google Safe Browsing, PhishTank, and the impersonated brand, PancakeSwap, to aid in broader mitigation efforts.