coinbase--wellat[.]created[.]app

The domain coinbase--wellat.created.app is flagged as a high-risk brand impersonation targeting Coinbase. Analysis indicates that the domain was registered through Tucows Domains Inc. on July 12, 2023. It currently resolves to the IP address 216.150.16.193, which is located in the United States and is part of the AS16509 Amazon.com, Inc. network. The site's SSL certificate is issued by Let's Encrypt, and the domain is hosted on Vercel, as evidenced by the nameservers ns1.vercel-dns.com and ns2.vercel-dns.com.

The HTTP status of the domain is 404, indicating that the page is not currently accessible or has been taken offline. Google Safe Browsing flags this domain for social engineering, which aligns with the classification of the site as a crypto scam. The domain appears on one security blocklist, specifically PhishDestroy, and 10 of 95 security vendors on VirusTotal flag it as a threat.

The page title, 'Coinbase Extension | Smart, Simple & Secure Crypto Access,' suggests an attempt to appear legitimate and attract users looking for a Coinbase extension or service. Defenders should be vigilant and block access to this domain to prevent potential social engineering attacks and crypto scams. Additional monitoring and analysis are recommended to track any future activity or changes in the domain's infrastructure and content.