help-coin-base-pro-cdn[.]typedream[.]app

This domain, help-coin-base-pro-cdn.typedream.app, poses a high-risk phishing threat by impersonating Coinbase, a cryptocurrency exchange platform. The site displays a fraudulent login page titled 'Log In | Robinhood® | Sign In to Your Account* | web__robimhood …', which is designed to deceive users into entering credentials or financial details under the false pretense of accessing a legitimate service. Such impersonation attacks are commonly used to harvest sensitive information, leading to unauthorized account access, financial theft, or further exploitation through social engineering tactics. Analysis indicates the domain is actively malicious, with 17 out of 95 security vendors on VirusTotal flagging it as phishing. Infrastructure analysis reveals the domain resolves to IP address 188.114.96.3, hosted on Cloudflare’s network (AS13335). The SSL certificate is issued by Google Trust Services (WE1), a common tactic to lend false legitimacy. The domain appears on one security blocklist and is registered through Cloudflare, Inc. The page title mismatch—claiming to be Robinhood while impersonating Coinbase—further confirms its deceptive nature. No legitimate creation date or historical context is provided, suggesting recent deployment for malicious purposes. Users who have visited this domain or entered credentials should immediately revoke access to any associated accounts, particularly Coinbase or other financial services. Enable multi-factor authentication (MFA) on all critical accounts to mitigate unauthorized access. Monitor for unusual activity, such as unauthorized transactions or login attempts, and report the incident to the targeted brand’s security team. If financial data was entered, contact the relevant institution to freeze accounts and initiate fraud procedures. Additionally, scan the device used to access the domain for malware, as phishing sites may deploy additional payloads. Block the domain and its resolving IP (188.114.96.3) at the network level to prevent further exposure.