pancake-frontend-clone[.]vercel[.]app

This domain, pancake-frontend-clone.vercel.app, poses a high-risk brand impersonation threat targeting users of the DODO decentralized exchange platform. Analysis indicates the site mimics the legitimate PancakeSwap interface to deceive victims into connecting wallets or authorizing malicious transactions, likely functioning as a crypto drainer. The domain is designed to exploit trust in familiar DeFi interfaces while siphoning funds through fraudulent smart contract interactions or social engineering tactics. Infrastructure analysis reveals multiple technical indicators supporting this assessment. The domain is flagged by 20 out of 95 security vendors on VirusTotal, appears on one security blocklist, and resolves to IP address 64.29.17.195 (AS16509, Amazon.com, Inc.). Registered through Tucows Domains Inc. on February 21, 2026, the domain uses an SSL certificate issued by Google Trust Services (WR1), which may lend false legitimacy. The page title explicitly displays 'PancakeSwap,' despite the targeted brand being DODO, suggesting an attempt to leverage PancakeSwap's reputation while focusing on DODO users. Users who have visited this domain should immediately revoke any connected wallet permissions through their blockchain interface. All transactions authorized during the visit should be reviewed for suspicious activity, particularly those involving token approvals or fund transfers. If credentials or private keys were entered, the affected wallet should be considered compromised and funds transferred to a new secure wallet. Browser extensions or applications downloaded from this domain should be removed, and systems scanned for malware. Network-level blocking of the domain and its resolving IP (64.29.17.195) is recommended for organizations to prevent further exposure.