ethereum-block-explorer-ten[.]vercel[.]app

The domain ethereum-block-explorer-ten.vercel.app is flagged as a high‑risk brand impersonation campaign targeting Ethereum users. Technical analysis shows the site resolves to IP 64.29.17.67, hosted in the United States under ASN AS16509 (Amazon.com, Inc.). The domain was registered on 10 December 2023 and is served over HTTPS using a Google Trust Services / WR1 certificate, indicating a valid TLS chain but not authenticating the underlying content. Infrastructure fingerprints reveal deployment on Vercel with a React front‑end and HSTS enabled, returning HTTP 200 and displaying the generic page title "React App". The site appears on one security blocklist and has been blocked by PhishDestroy; Gridinsoft assigns a trust score of 0 / 100, and 12 of 95 VirusTotal scanners have raised detections. While the page content has not been publicly dissected, the combination of a recent domain, cloud‑based hosting, and the use of a legitimate TLS certificate suggests an attempt to lend credibility to a crypto‑related scam. Defenders should immediately block the domain at network perimeters, update URL filtering and IDS signatures to include this exact hostname, and monitor outbound connections to the associated IP range for anomalous activity. Continuous re‑evaluation is advised, as further malicious payloads or credential‑harvesting pages may be added without notice.