dot-dapp[.]vercel[.]app

dot-dapp.vercel.app is currently active and classified as a generic phishing campaign targeting cryptocurrency users, as indicated by the page title “Polkadot dApp” and the intelligence label “Crypto Scam”. The domain resolves to IP 64.29.17.3, hosted on Amazon’s AS16509 infrastructure in the United States. Registration was performed through Tucows Domains Inc. on February 21, 2026. The site presents a valid SSL certificate issued by Google Trust Services / WR1 and enforces HSTS, which may lend an appearance of legitimacy. Technical fingerprinting shows the use of Vercel hosting. The domain appears on one security blocklist (PhishDestroy) and is flagged by Google Safe Browsing for social engineering. VirusTotal reports three detections out of 93 scanners. Gridinsoft assigns a trust score of 0/100. The HTTP response code is 200, confirming that the server is reachable. While the exact content of the landing page has not been analysed, the combination of a cryptocurrency‑related title, phishing classification, and multiple vendor detections suggests a high‑risk threat. Defenders should block the domain at network perimeter, add it to URL filtering policies, and monitor for any outbound connections to the associated IP. Continuous re‑scanning is recommended to capture potential changes in payload or hosting.