coinbaseblockchain[.]vercel[.]app

This domain is flagged as a high-risk brand impersonation threat designed to mimic Coinbase, a major cryptocurrency exchange platform. Analysis indicates the site likely hosts a fraudulent login interface intended to harvest user credentials, payment details, or cryptocurrency wallet information. The domain specifically targets individuals attempting to access Coinbase services, exploiting the brand's reputation to deceive victims into entering sensitive data under false pretenses. Infrastructure analysis reveals multiple technical indicators supporting this classification. The domain was registered through Tucows Domains Inc. on February 21, 2026, an unusually future-dated creation that may indicate an attempt to evade detection or appear legitimate. It resolves to IP address 216.198.79.131 and uses an SSL certificate issued by Google Trust Services (WR1), which provides a false sense of security. Security vendors have flagged the domain in 3 out of 95 VirusTotal engines, and it appears on one active security blocklist. Despite these detections, the domain remains operational, increasing exposure risk. Users who have visited coinbaseblockchain.vercel.app should take immediate action to mitigate potential compromise. If credentials or financial information were entered, affected accounts should be locked, passwords reset from a secure device, and multi-factor authentication enabled where available. Monitor all linked accounts for unauthorized transactions and report suspicious activity to the legitimate service provider. Clear browser cache and cookies to remove any residual tracking elements. Consider running a full system scan for malware, as some phishing pages deploy secondary payloads. Security teams should add this domain to blocklists and monitor network logs for connections to 216.198.79.131 or related subdomains.