wormhole-academy-wormhole[.]vercel[.]app

This domain is flagged as a high-risk brand impersonation targeting the Wormhole brand. The domain was registered on December 6, 2025, and remains active as of July 12, 2026. It is hosted on Vercel Inc. infrastructure, resolving to IP address 216.198.79.195 in the United States (AS16509 Amazon.com, Inc.). The page title is 'Wormhole', consistent with the impersonated brand. SSL certification is provided by Google Trust Services (WR1). Technology stack includes Node.js, React, Next.js, Webpack, HSTS, and Google Analytics. Google Safe Browsing flags the domain for social engineering. VirusTotal shows 14 of 95 security vendors flagging this domain as malicious. It appears on one security blocklist and is blocked by PhishDestroy. Gridinsoft trust score is 0/100. The exact phishing mechanism and page content have not been directly observed; however, the combination of a low trust score, multiple vendor detections, and social engineering flags strongly suggests the domain is used to deceive visitors into divulging credentials or sensitive information under the guise of the legitimate Wormhole platform. Defenders should block the domain at the network level, add it to email security filters, and monitor for any subdomains or related redirects. Users should be warned not to interact with the site or provide any personal data. Given the high-risk classification and ongoing activity, immediate containment and user notification are recommended.