mainnettdappfix[.]vercel[.]app

Analysis of the domain mainnettdappfix.vercel.app indicates it was actively used in an investment scam campaign targeting cryptocurrency wallet users. The domain, registered on February 21, 2026, through Tucows Domains Inc., resolved to the IP address 64.29.17.3, hosted under Amazon.com, Inc. (AS16509) in the United States. The page title, 'Wallet Rectify - Rectification, Synchronization, and Validation,' suggests an attempt to deceive users into believing the site offers legitimate wallet recovery or synchronization services, a common tactic in cryptocurrency-related fraud. As of July 22, 2026, the domain has been taken offline, returning an HTTP 451 status, which typically indicates content unavailable for legal reasons. Prior to its removal, the domain appeared on five security blocklists and was actively blocked by multiple security vendors, including PhishDestroy, ScamSniffer, Polkadot, Enkrypt, and Codeesura.

The SSL certificate, issued by Google Trust Services (WR1), does not mitigate the domain's malicious classification, as phishing sites frequently employ valid certificates to appear legitimate. Detection metrics from VirusTotal, where five out of ninety-three security vendors flagged the domain, further corroborate its malicious nature. The domain was hosted on Vercel, a platform often abused for rapid deployment of phishing infrastructure due to its ease of use and free tier. The presence of HTTP Strict Transport Security (HSTS) headers indicates an attempt to reinforce the illusion of security, though this does not offset the domain's fraudulent intent.

Defenders should treat this domain as part of a broader pattern of investment scams leveraging Vercel-hosted subdomains. Network-level blocking of the resolved IP (64.29.17.3) and monitoring for similar subdomains under vercel.app are recommended.