pro-coinbase[.]typedream[.]app

Analysis of the domain pro-coinbase.typedream.app indicates a crypto scam impersonating Coinbase, classified as brand impersonation with an elevated risk level. As of July 23, 2026, the domain is offline, returning an HTTP 404 status. It appears on one security blocklist (PhishDestroy) and was flagged by 12 of 95 security vendors on VirusTotal, confirming detection by multiple engines. The domain resolves to IP 172.67.206.36, hosted on Cloudflare's network (AS13335) in the US, with no nameservers currently assigned. SSL certification is provided by Google Trust Services (WE1), a common but not inherently malicious issuer.

Infrastructure analysis reveals the use of Node.js, React, Next.js, Google Cloud services (including Cloud Trace and CDN), Webpack, and Cloudflare, suggesting a modern web stack likely deployed for scalability. The page title 'Home' provides no additional context about the scam mechanics, and no specific content analysis is available. The domain was registered through Cloudflare, a registrar frequently used for both legitimate and malicious sites. Defenders should treat this domain as confirmed malicious due to its presence on a security blocklist, vendor detections, and alignment with known crypto scam patterns.

While offline at the time of assessment, the infrastructure remains intact, and the domain could be reactivated. Monitoring for DNS resolution changes, SSL certificate updates, or HTTP status shifts is recommended. Blocking the domain and associated IP (172.67.206.36) at perimeter defenses is advised, along with alerting on any internal access attempts. No evidence links this domain to broader campaigns or additional threat actors, but correlation with other Coinbase-themed scams may be warranted.