# coinbase-clones.vercel.app — MALICIOUS

> Explore the safety status of coinbase-clones.vercel.app. Under investigation for phishing threats with social engineering flags from Google Safe Browsing.

## Summary
PhishDestroy has identified coinbase-clones.vercel.app as a suspicious domain potentially involved in generic phishing activities. Classified under the risk level 'under_investigation,' this domain mimics legitimate cryptocurrency platforms, likely attempting to deceive users.

The domain is registered through Vercel Inc. and resolves to the IP address 64.29.17.131. Although VirusTotal scans reveal zero detections across 95 security vendors, Google Safe Browsing categorizes it as a social engineering threat. This discrepancy suggests the domain is newly active or operates with subtle tactics to avoid immediate detection.

Currently, coinbase-clones.vercel.app remains active and flagged for investigation. PhishDestroy recommends exercising caution when encountering this domain, monitoring its activity closely, and applying appropriate blocking measures until further clarity is achieved.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP ?)
- Target brand: Coinbase
- Page title: Deployment Unavailable

## Domain Intelligence
- Registered: 2026-03-06 11:07:01
- Registrar: Vercel Inc.
- Country: US
- IP: 64.29.17.131
- IP Country: US
- IP City: Walnut
- IP Org: AS16509 Amazon.com, Inc.
- Nameservers: NS_NOT_FOUND
- SSL Issuer: Google Trust Services / WR1

## Detection Status
- VirusTotal: 12 vendors flagged
  Vendors: ["ADMINUSLabs", "ChainPatrol", "alphaMountain.ai", "BitDefender", "CyRadar", "ESET", "Fortinet", "G-Data", "Google Safebrowsing", "Lionic", "Sophos", "VIPRE"]
- Google Safe Browsing: FLAGGED
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "MetaMask"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cc287-fa8b-77db-aed3-e83c40604582.png
- Cloudflare Radar: https://radar.cloudflare.com/domains/coinbase-clones.vercel.app
- Wayback Machine: https://web.archive.org/web/https://coinbase-clones.vercel.app
- PhishDestroy: https://phishdestroy.io/domain/coinbase-clones.vercel.app/
- LLM endpoint: https://phishdestroy.io/domain/coinbase-clones.vercel.app/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/coinbase-clones.vercel.app/
Last updated: 2026-03-19