connectblockchain[.]vercel[.]app

The domain connectblockchain.vercel.app was registered on March 03, 2026 through Vercel Inc. and hosted on the Vercel platform, as indicated by the technology fingerprint. The site resolves to the IP address 216.198.79.195, which belongs to Amazon.com, Inc. (AS16509) and is geolocated in the United States. An SSL certificate issued by Google Trust Services under the WR1 profile secures the host, and HTTP responses return status code 451, indicating that the content is unavailable for legal reasons. The page title observed during the brief crawl is “Blockchain Connect,” and the domain is explicitly listed as impersonating the legitimate brand Blockchain.com. Multiple defensive feeds have taken action against the domain.

It appears on three independent security blocklists, and it has been blocked by PhishDestroy, MetaMask, and the SEAL (Security Enforcement and Alert List) project. VirusTotal analysis shows that one of ninety‑four scanning engines flagged the domain, reinforcing the suspicion of malicious activity. The presence of HSTS in the technology stack suggests that the operator attempted to enforce HTTPS connections, a common tactic in credential‑harvesting sites. The current status of the domain is offline, which may reflect takedown efforts or a temporary suspension. However, the combination of brand impersonation, recent registration, hosting on a reputable cloud provider, and detection by several anti‑phishing services indicates that the domain was used for a targeted brand‑impersonation campaign aimed at Blockchain.com users.

No further content details, such as form fields or credential capture mechanisms, have been observed, leaving the exact attack vector uncertain. Defenders should continue to block the domain at network perimeters and update URL filtering rules to include both the full FQDN and its parent Vercel sub‑domain pattern.