jw-opensea-clone-app[.]vercel[.]app

The domain jw-opensea-clone-app.vercel.app is currently active and identified as a brand impersonation threat, specifically targeting Coinbase. It is designed to deceive users by mimicking the appearance and functionality of legitimate services, thus posing a significant risk to users who may unknowingly provide sensitive information.

Infrastructure analysis reveals the domain resolves to the IP address 64.29.17.131, located in the United States under AS16509 (Amazon.com, Inc.). The domain was registered through Tucows Domains Inc. and was created on February 21, 2026. It is noteworthy that the domain has been flagged by 1 out of 95 security vendors on VirusTotal and is currently listed on 1 security blocklist, including PhishDestroy. Additionally, Google Safe Browsing has flagged this domain for phishing activities.

Given the high risk associated with this domain, it is recommended that users avoid interacting with it. Organizations should employ security measures such as DNS filtering and user education to mitigate the risk of credential theft and other malicious activities. Monitoring for indicators of compromise related to this domain can further enhance security posture and protect against potential threats. Immediate blocking of the domain at the network level is advised to prevent any unauthorized access or data exfiltration attempts.