coinbase16[.]vercel[.]app

This domain, coinbase16.vercel.app, is assessed as high risk for brand impersonation, specifically targeting the cryptocurrency exchange Coinbase. The domain was created on February 21, 2026, and has since been taken offline, indicating a potential shutdown due to detection and reporting.

Analysis indicates that 18 out of 95 security vendors on VirusTotal flag this domain as malicious, suggesting a significant level of suspicion. The domain is registered through Tucows Domains Inc. and resolves to the IP address 216.198.79.67, which is located in the United States and belongs to AS16509 Amazon.com, Inc. The SSL certificate is issued by Google Trust Services / WR1. Despite the SSL, the domain is flagged by Google Safe Browsing for phishing and appears on two security blocklists: PhishDestroy and PhishingDB. The page title is 'Deployment Unavailable,' which may indicate a temporary shutdown or an attempt to evade detection. These factors collectively suggest a high likelihood of fraudulent activity aimed at impersonating Coinbase.

To mitigate the risks associated with brand impersonation, individuals and organizations should avoid clicking on links or providing personal information to any site resembling Coinbase's domain. Security teams should update their blocklists to include coinbase16.vercel.app and monitor for any related malicious activity. Additionally, educating users about the importance of verifying domain URLs and using official channels for accessing financial services can significantly reduce the chances of falling victim to such scams.