coinpool[.]app

This domain, coinpool.app, is actively flagged as a high-risk crypto drainer phishing site. Registered on May 11, 2026, through Name.com, Inc., it resolves to IP address 188.114.96.3, hosted behind Cloudflare infrastructure in Canada. The domain is currently served by Cloudflare nameservers (hadlee.ns.cloudflare.com, nash.ns.cloudflare.com) and returns an HTTP 200 status, indicating an operational endpoint. Analysis of threat intelligence sources reveals the domain appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL, and is linked to one AlienVault OTX pulse. The page title, COINPOOL, aligns with the reported scam type, suggesting a focus on cryptocurrency theft. Only one of 92 security vendors on VirusTotal has flagged this domain, which may reflect limited detection coverage rather than low risk. The SSL certificate is issued by Google Trust Services (WE1), a common but not inherently malicious provider. Defenders should treat this domain as an active threat, particularly in environments handling cryptocurrency transactions. Blocking the domain and associated IP (188.114.96.3) is recommended, along with monitoring for connections to the nameservers or certificate authority. Further analysis of the site’s content or payload is needed to confirm specific attack vectors, but the available indicators confirm its classification as a crypto drainer.