mass.report
Scan Intelligence Report0/100
critical Risk
pancakes-wap-login.created.app
https://pancakes-wap-login.created.app/
IP
216.150.1.129 · Vercel, Inc
Location
Walnut, United States
Domain Age
945 days
HTTP
200 · 23.4s
SSL
Valid· R12, Let's Encrypt, US
Status
COMPLETED
Domain Intelligence: created.app
Scanned 2 times since Feb 11, 2026, 01:47 AM UTC
✗ Critical (88)
Registered-domain escalation
Submit created.app as the primary IOC, enriched with evidence from hostile subdomains like pancakes-wap-login.created.app.
KB/IOK Matches (0)—
No KB/IOK detections were recorded for this scan.
PancakeSwap
Credential PhishingCryptocurrency · 4/5/2026
Summary
The site at pancakes-wap-login.created.app is impersonating PancakeSwap, a well-known decentralized exchange. The page title explicitly states 'PancakeSwap Login', and it contains a login form designed to capture user credentials. This domain is a clear phishing attempt, as it does not match the official PancakeSwap domain.
Attack Techniques (4)
Impersonation of PancakeSwap with matching page titleLogin form present for credential harvestingDomain does not match official PancakeSwap domainHigh number of external scripts indicating potential malicious functionality
Indicators of Compromise (5)
▸Domain: pancakes-wap-login.created.app
▸Page Title: PancakeSwap Login
▸POST request to monitoring endpoint: https://pancakes-wap-login.created.app/monitoring?o=1154715&p=4506742732881920&r=us
▸External script loaded from: https://cdn.created.app/_next/static/chunks/main-app-017ed692da2ee885.js
▸SSL Certificate issued by Let's Encrypt
Risk AssessmentUsed in abuse reports
The domain pancakes-wap-login.created.app is a fraudulent site impersonating PancakeSwap, as evidenced by the page title 'PancakeSwap Login' and the presence of a login form designed to capture user credentials. The domain was created on July 12, 2023, indicating it is a newly registered domain used for phishing. Furthermore, the site is hosted on Vercel, Inc., and the SSL certificate is issued by Let's Encrypt, which is commonly used by malicious actors for phishing sites. Immediate action is required to mitigate this threat.
Recommended Action
Suspend Domain
Cross-Reference8
URL Intelligence
Domain Intelligence
IP Intelligence
Public threat feed available — JSON API