The problem is missing source proof, not just the hosting platform
A Vercel subdomain is not automatically bad. Many legitimate projects use Vercel for demos, documentation, or prototypes. The problem with this Verity Mod page is that the download claims are separated from the project records a player needs before installing a Minecraft mod. A strong Java route should preserve a Modrinth project ID, version ID, file name, loader, Minecraft version, file size, and hash. A strong CurseForge route should preserve the project ID, file record, owner, supported game version, and file history. A Bedrock route should preserve the add-on project and MCADDON record. The Vercel page instead presents a generic landing page with a button and broad loader labels.
That distinction matters because fake Verity Mod pages benefit from the same urgency that makes the keyword valuable. A player sees a viral video, searches for a quick download, and clicks the first page that looks like a product site. If the page hides the final source, the user cannot compare the download against the maintained Java or Bedrock route. The safer answer is slower: match the publisher record first, then download from the source page only when the edition, loader, package, and version all line up.