coinbase-giveaway[.]vercel[.]app

The domain coinbase-giveaway.vercel.app is currently active and classified as a high‑risk generic phishing site. Registration information shows the domain was provisioned through Vercel, a cloud platform that frequently hosts short‑lived malicious sites. Google Safe Browsing has flagged the URL for social engineering, indicating that the page is designed to lure users into disclosing credentials or personal information. Multiple defensive feeds have already taken action: the domain is listed on three public security blocklists and has been blocked by PhishDestroy, MetaMask, and SEAL, demonstrating that at least several protective products consider it malicious.

VirusTotal analysis reveals that eight out of ninety‑one scanning engines have identified the domain as suspicious or malicious, providing independent confirmation of its threat status. The combination of a reputable hosting provider, explicit Safe Browsing warnings, blocklist presence, and multi‑vendor detections suggests a coordinated attempt to exploit interest in cryptocurrency giveaways. What remains uncertain is the exact content of the hosted page, the specific payload or credential‑harvesting mechanism, and any additional infrastructure such as IP addresses or SSL certificate details, as these data were not supplied.

Defenders should immediately add coinbase-giveaway.vercel.app to web‑filter and DNS‑allow‑list deny rules, monitor outbound connections for communications to Vercel‑hosted IP ranges, and enforce multi‑factor authentication for any accounts that could be targeted. Continuous re‑scanning with VirusTotal and regular checks against Google Safe Browsing are advisable to capture any changes in the domain’s behavior. Organizations using cryptocurrency wallets or exchange services should alert users to the presence of this malicious site and reinforce policies against unsolicited giveaway links.