us-coibspo-auut[.]pineapple[.]page

The domain us-coibspo-auut.pineapple.page is a high-risk phishing site engaged in brand impersonation targeting Coinbase users. It presents itself as a legitimate Coinbase Pro login portal under the title 'Coinbase Pro Login | Secure Access' but is designed to harvest cryptocurrency credentials through social engineering. No drainer kit was identified, and the site is currently taken offline, though it remains a documented threat due to its recent activity.

Technical indicators confirm the malicious nature of us-coibspo-auut.pineapple.page. The domain is flagged by 15 of 95 VirusTotal security vendors, including ADMINUSLabs, ChainPatrol, and BitDefender, and is explicitly labeled for phishing by Google Safe Browsing with the tag 'SOCIAL_ENGINEERING'. It appears on one security blocklist (PhishDestroy) and is registered through Vercel Inc. The site resolves to the IP address 216.150.16.193, hosted on Amazon.com, Inc. infrastructure (AS16509) in the US, and uses an SSL certificate issued by Let's Encrypt (R13). Detected technologies include Vercel and HSTS, while Gridinsoft assigns it a trust score of 0/100.

Victims of us-coibspo-auut.pineapple.page should immediately change their Coinbase passwords and enable two-factor authentication (2FA) to prevent unauthorized access. Monitor accounts for suspicious transactions or unauthorized logins, and report any fraudulent activity to Coinbase support. Additionally, users can report the domain to Google Safe Browsing, PhishTank, or their local cybercrime authority to aid in takedown efforts. If cryptocurrency was compromised, revoking token approvals and transferring remaining funds to a new wallet is recommended.