crypto-punk-beta[.]vercel[.]app

The domain crypto-punk-beta.vercel.app is assessed as a high-risk brand impersonation threat targeting Coinbase. This type of threat involves the creation of a deceptive online presence designed to trick users into sharing sensitive information, such as login credentials or financial data, under the guise of a trusted brand.

Analysis indicates that the domain is currently active and appears on 1 security blocklist. On VirusTotal, 15 out of 95 security vendors flag this domain as malicious. The domain is registered through Vercel Inc. and resolves to the IP address 64.29.17.131, which is located in the United States and is part of the AS16509 Amazon.com, Inc. network. The SSL certificate is issued by Google Trust Services, which may lend a false sense of security to unsuspecting users. The page title found is 'CryptoPunk', further reinforcing the deceptive nature of the site. The domain is blocked by PhishDestroy, indicating its recognition as a phishing threat. Google Safe Browsing also flags this domain for phishing.

To mitigate the risk posed by this brand impersonation threat, users should be cautious when clicking on links or entering personal information on websites that appear to mimic Coinbase. Organizations should consider implementing DNS-based blocking to prevent access to this domain. Additionally, users should verify the URL and SSL certificate of the site they are visiting, and report any suspicious activity to Coinbase's security team. Security awareness training can also help users recognize and avoid such deceptive sites.