polymarket-tlh4[.]vercel[.]app

This domain, polymarket-tlh4.vercel.app, is flagged as a generic phishing operation impersonating a decentralized prediction market platform. Analysis indicates the site uses the brand name 'PredictX' to lure users into connecting cryptocurrency wallets, where it likely deploys malicious smart contracts or signature requests to drain funds. No specific drainer kit has been conclusively identified, but the infrastructure aligns with known phishing frameworks targeting Web3 users. Infrastructure analysis reveals multiple technical indicators of compromise. The domain is registered through Vercel Inc. and resolves to the IP address 64.29.17.67, a hosting provider frequently associated with fraudulent deployments. Created on March 28, 2026, the domain predates legitimate use, suggesting premeditated abuse. VirusTotal detection shows 2 out of 95 security vendors flagging the domain, while it appears on three distinct security blocklists. The SSL certificate, issued by Google Trust Services (WR1), provides encryption but does not validate legitimacy, as phishing sites commonly exploit trusted certificate authorities. The domain remains active as of this assessment, posing an ongoing threat to users. Recommended response actions include immediate blacklisting in enterprise security gateways, browser-based blocking via Safe Browsing integrations, and wallet-level protections to prevent interaction with the domain. Despite low detection rates on some security platforms, the combination of brand impersonation, recent creation date, and blocklist presence elevates the risk to high. Users should verify domain authenticity through official channels and avoid connecting wallets to unverified prediction market interfaces.