polymarket[.]predict-ai[.]app

This domain, polymarket.predict-ai.app, is actively engaged in a brand impersonation phishing campaign targeting users of the Solana blockchain ecosystem. The site presents itself as an AI-powered prediction market platform under the title 'PredictAI - AI-Powered Prediction Market Trading,' a facade designed to deceive users into connecting their cryptocurrency wallets. Infrastructure analysis reveals the use of malicious wallet-draining scripts, a common tactic in crypto phishing operations, which siphon funds once a user authorizes a transaction. The site’s design and branding closely mimic legitimate Solana-related services, increasing the likelihood of successful deception among unsuspecting users. Technical indicators confirm the malicious nature of this domain. polymarket.predict-ai.app resolves to the IP address 104.21.29.214 and is registered through Tucows Domains Inc., with a creation date of February 21, 2026, suggesting a recently established operation. VirusTotal detection metrics report that 3 out of 95 security vendors have flagged this domain as malicious, while it appears on three independent security blocklists. The domain employs Cloudflare for hosting and protection, a common evasion tactic to obscure its true origin and complicate takedown efforts. Additionally, the SSL certificate is issued by Google Trust Services, which, while providing encryption, does not validate the legitimacy of the site’s operations. Users who have visited polymarket.predict-ai.app or interacted with its content are advised to take immediate action to mitigate potential risks. First, revoke any wallet permissions granted to the domain using a blockchain explorer or wallet management tool. Next, scan the affected device for malware using updated security software to detect and remove any residual threats. Monitor connected cryptocurrency wallets for unauthorized transactions and transfer remaining funds to a new, secure wallet if compromise is suspected. Finally, report the domain to relevant security communities and blocklist providers to prevent further victimization. Given the elevated risk level, users should exercise heightened caution when engaging with any cryptocurrency-related platforms, particularly those promoting unsolicited investment opportunities.