SafeMode - Analysis: pcswap.org

Visual Capture

No screenshot available

Detection Info

https://pcswap.org/lottery

Detected Brand

PancakeSwap

Country

International

Confidence

100%

HTTP Status

200

Report ID

291f86fb-bdd…

Analyzed

2026-01-13 12:36

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T142F3F8F483A435F9510BAFD4DB327AAB715B74BFEFE28684837847916682C9CD848C41
CONTENT ssdeep	1536:s/XfbX0K1lQLfUUC5l2drpfkKn5RI1hABkvs3n9dluTlQLfUUQlQLfUUpJ4CFf5G:m1Iy2d1kK5RI1hAoIQILF32F

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	9be49be4d2c8e0d2
VISUAL aHash	ff00000000003c3c
VISUAL dHash	e870f0f04db27979
VISUAL wHash	ffff181800b83c3c
VISUAL colorHash	01000400030
VISUAL cropResistant	00e0e004b30c0828,a2a43f233b23a0be,d2c298b0a09a9ac0,70d4f05432716979

Code Analysis

Risk Score 100/100

Threat Level BAJO

🎣 Credential Harvester 🎣 OTP Stealer 🎣 Card Stealer 🎣 Banking 🎣 Personal Info

WebSocket C2 🔥 Firebase Backend

🔬 Threat Analysis Report

• Threat: Potential brand impersonation.
• Target: PancakeSwap users.
• Method: Using a similar but different domain name.
• Exfil: No exfiltration detected.
• Indicators: Similar domain name, but TLD is common.
• Risk: LOW - Potentially misleading but no data theft observed.

🔒 Obfuscation Detected

atob
fromCharCode
unescape
hex_escape
unicode_escape
base64_strings

🎯 Kit Endpoints

https://blog.pancakeswap.finance
solana:signAndSendTransaction
solana_signAndSendTransaction
https://blog.pancakeswap.finance/

📡 API Calls Detected

https://api.blocto.app/networks/evm
stats
proxy
/api/auth/telegram-callback
account
https://raw.githubusercontent.com/pancakeswap/airdrop-v3-users/master/forFE.json
https://raw-api.pancakeswap.com/ondo/market-status
https://aptos.pancakeswap.finance
0x3b3b57de
/__cookies__
https://solana.pancakeswap.finance
https://api-v3.raydium.io/main/auto-fee
https://raw-api.pancakeswap.com/ondo/status
https://www.google.com/ccm/geo
POST
logs
/api/paymaster
https://proofs.pancakeswap.com/cms-config/routing-base-config.json
GET