infura-block-explorer[.]vercel[.]app

This domain, infura-block-explorer.vercel.app, is identified as a phishing site specifically designed to impersonate Infura, a legitimate blockchain infrastructure provider. The site presents itself as a block explorer, a tool commonly used to view transaction data on blockchain networks. Analysis indicates the domain is actively engaged in credential harvesting, likely targeting cryptocurrency users who may be tricked into entering sensitive wallet or login information into fraudulent input fields. Infrastructure analysis reveals the domain was registered through Vercel Inc. and currently resolves to the IP address 64.29.17.3, hosted on Amazon.com, Inc.'s AS16509 network in the United States. The page title, "Infura Block Exolorer," contains a typographical error, which may serve as a subtle indicator of its malicious intent. The domain is flagged by 2 of 95 security vendors on VirusTotal and appears on one security blocklist. The SSL certificate is issued by Google Trust Services (WR1), which, while legitimate, does not mitigate the domain's fraudulent purpose. No creation date is available in the provided data, but the domain remains operational and unblocked by most security platforms. Current status confirms the domain is still active and poses a high risk to users. Organizations and individuals are advised to block this domain at the network level and update endpoint protection rules to prevent access. Cryptocurrency users should verify the authenticity of any block explorer or service before entering credentials, particularly those hosted on third-party platforms like Vercel. Security teams are recommended to monitor for similar domains using Infura branding and to alert users about the risks of interacting with unverified blockchain tools. Immediate reporting to relevant security platforms is encouraged to expand blocklist coverage and mitigate further exposure.