projeto-coinbase[.]vercel[.]app

This domain is flagged as a high-risk brand impersonation threat targeting Apple users through a fraudulent Coinbase-themed interface. Analysis indicates the domain is designed to harvest login credentials by mimicking legitimate authentication flows, a common tactic in credential theft campaigns. Infrastructure analysis reveals the domain projeto-coinbase.vercel.app is hosted on IP 64.29.17.67 (US, AS16509) and was registered via Tucows Domains Inc. on February 21, 2026, an anomalous future date suggesting domain spoofing. The SSL certificate is issued by Google Trust Services (WR1), and the page title displays 'Coinbase' despite impersonating Apple. VirusTotal detection rates show 12 out of 95 security vendors flag the domain as malicious. The domain appears on one security blocklist and is classified as phishing by Google Safe Browsing. Current status confirms the domain remains active and unremediated. Mitigation requires immediate blocking of the domain and its resolving IP at network perimeter controls. Security teams should prioritize credential reset procedures for any users who may have interacted with the domain. Monitoring for secondary payload delivery or follow-up phishing attempts via associated email addresses or IPs is recommended. User awareness training should emphasize identifying mismatched branding in login portals, particularly when domain names or page titles reference unrelated brands.