assets-cinsbssei-com-sign[.]pineapple[.]page

The domain assets-cinsbssei-com-sign.pineapple.page is currently flagged as a high‑risk brand‑impersonation site targeting Coinbase. Infrastructure analysis shows it resolves to IP address 216.150.16.65, which belongs to Amazon.com, Inc. (AS16509) and is located in the United States. The host is served from Vercel infrastructure and presents an HTTPS certificate issued by Let’s Encrypt (R13), indicating that encryption is in place but does not guarantee legitimacy. The site advertises HSTS, yet the page title returned is "Coinbase.com Sign In-Coinbase Help," directly referencing Coinbase and confirming the impersonation intent.

Google Safe Browsing classifies the URL as social engineering, and the Gridinsoft trust score is 0/100, reflecting extreme suspicion. VirusTotal records 13 detections out of 95 scanned vendors, reinforcing the malicious classification. The domain appears on a single security blocklist and has been actively blocked by PhishDestroy. Registration details reveal the domain was created through Vercel Inc., and no nameserver information could be resolved (NS_NOT_FOUND).

Although the HTTP response code is 200, the site is presently taken offline, limiting immediate exposure but indicating that it was operational at some point. Defenders should continue to block the domain at perimeter and DNS layers, monitor for any re‑registration or similar sub‑domains, and update internal threat intel with the observed indicators, including the IP address, SSL fingerprint, and the specific page title. Continuous vigilance is advised because the underlying Vercel hosting can be reused for future impersonation campaigns targeting Coinbase or other crypto‑related brands.