store-en-consbas[.]pineapple[.]page

This domain, store-en-consbas.pineapple.page, is flagged as a high-risk crypto scam impersonating Coinbase, a well-known cryptocurrency exchange platform. Analysis indicates the domain was taken offline on July 23, 2026, following detection by multiple security mechanisms. The page title, 'Coinbase Pro Login | Secure Access to Your Crypto,' directly aligns with the reported brand target, suggesting an attempt to deceive users into entering credentials on a fraudulent login portal. Infrastructure analysis reveals the domain resolved to IP 216.150.16.1, hosted on Amazon.com, Inc. (AS16509) in the United States, and was registered through Vercel Inc. The SSL certificate, issued by Let's Encrypt (R13), does not mitigate the risk, as phishing sites commonly use valid certificates to appear legitimate.

Security vendors detected malicious activity associated with this domain, with 13 of 95 engines on VirusTotal flagging it as suspicious. Google Safe Browsing classified the site as engaging in social engineering, and it appears on at least one security blocklist. The domain lacked configured nameservers (NS_NOT_FOUND), a common red flag in phishing infrastructure. Technologies detected include Vercel for hosting and HTTP Strict Transport Security (HSTS), which may have been leveraged to enhance perceived legitimacy.

Gridinsoft assigned a trust score of 0/100, reinforcing the high-risk classification. Defenders should treat this domain as confirmed malicious and prioritize blocking or monitoring related indicators, including the IP address and SSL certificate issuer. Given the domain's current offline status, further analysis of its operational infrastructure is not possible, but historical data suggests it was part of a broader crypto phishing campaign. Organizations should review logs for connections to 216.150.16.1 or requests to store-en-consbas.pineapple.page and educate users on recognizing brand impersonation tactics in cryptocurrency-related scams.