origina-predictor[.]vercel[.]app

Analysis of the domain origina-predictor.vercel.app indicates a confirmed crypto scam actively impersonating the Polygon brand as of July 12, 2026. The domain, registered through Tucows Domains Inc. on February 21, 2026, resolves to the IP address 64.29.17.67, which is geolocated in the United States under AS16509 (Amazon.com, Inc.). The site is hosted on Vercel infrastructure, as evidenced by detected technologies, and enforces HSTS, a measure that does not mitigate its malicious intent. The page title, 'Predictor,' aligns with common crypto scam nomenclature, though the exact content and functionality of the site remain unanalyzed. Infrastructure analysis reveals the domain is currently active, returning an HTTP 200 status, and has been flagged by one security blocklist. Gridinsoft assigns a trust score of 0/100, further corroborating its malicious classification. While VirusTotal data shows only one of 93 security vendors detecting the domain, this does not diminish its confirmed status as a crypto scam. The SSL certificate is issued by Google Trust Services (WR1), a legitimate provider often exploited by threat actors to lend credibility to phishing domains. Defenders should treat this domain as high-risk due to its active impersonation of a major cryptocurrency platform, recent registration, and association with known scam infrastructure. Network-level blocking of the IP 64.29.17.67 and domain-level sinkholing are recommended to disrupt ongoing campaigns. Given the domain's use of Vercel, monitoring for additional subdomains under vercel.app with similar naming patterns may aid in identifying related threats. No evidence suggests this domain is part of a broader phishing kit or campaign beyond its current classification as a crypto scam.