coinbasepro-pi[.]vercel[.]app

coinbasepro-pi.vercel.app is an active crypto drainer domain impersonating Coinbase, currently classified under brand impersonation with an elevated risk level. This domain leverages the recognizable Coinbase branding to deceive users into connecting wallets or entering credentials, which are then exploited to siphon cryptocurrency assets. The threat remains active as of the latest assessment, with no evidence of takedown or remediation.

PhishDestroy’s investigation confirms this domain was flagged by 2 of 95 VirusTotal security vendors, indicating low but present detection across major security platforms. Registered through Vercel Inc., the domain resolves to IP address 64.29.17.3 and utilizes a Google Trust Services SSL certificate. While the exact registration date is unverified in open sources, the domain’s infrastructure lacks transparency, and no reputable listings associate it with legitimate Coinbase services. Trust scores are critically low due to the absence of verifiable organizational affiliations and the presence of crypto drainer behavior patterns.

Users encountering this domain must avoid interaction and report it immediately via PhishDestroy. Blocking the domain at the network and endpoint levels is strongly advised due to its confirmed malicious intent. Cryptocurrency holders are urged to verify all third-party platforms using only official Coinbase domains (coinbase.com or coinbasepro.com) and to enable multi-factor authentication on all wallet and exchange accounts. This domain represents a clear and present danger to users seeking legitimate cryptocurrency services.