help-coinpro-base[.]tem3[.]io

The domain help-coinpro-base.tem3.io has been identified as a brand impersonation site targeting Coinbase, specifically designed as a crypto drainer to steal users' cryptocurrency. This domain is currently offline, but it represents a significant threat to anyone who may have encountered it while it was active. The site posed as the official Coinbase Pro platform, using the title "Official Site® | Coinbase pro | Digital Asset Exchange" to deceive visitors into believing they were accessing a legitimate service.

According to available intelligence, this domain was flagged by 19 out of 95 VirusTotal vendors as malicious, indicating widespread recognition of its dangerous nature. It was registered through GoDaddy.com, LLC on August 2, 2024, and resolves to the IP address 188.114.97.3. The domain appears on three security blocklists and is flagged by Google Safe Browsing as phishing. Its SSL certificate was issued by Google Trust Services, which is common for legitimate sites, making it harder for users to detect the threat based solely on certificate presence.

Given the high risk level and specific threat as a crypto drainer impersonating Coinbase, users should exercise extreme caution. PhishDestroy recommends that anyone who visited this domain or entered credentials there should immediately change their passwords and enable two-factor authentication on their Coinbase accounts. Always verify the legitimacy of cryptocurrency platforms by checking official URLs and using trusted sources. For further verification, users can consult PhishDestroy's database for up-to-date threat intelligence on this and similar domains.