io-coinbase-pro-login[.]typedream[.]app

This domain has been assessed as high risk due to its clear brand impersonation of Coinbase, a well-known cryptocurrency exchange. The site was designed to deceive users into believing they were accessing a legitimate Coinbase login page, likely to harvest credentials or cryptocurrency assets. Although currently offline, the domain represents a significant threat to individuals who may have encountered it while active.

Technical indicators paint a concerning picture: VirusTotal flagged the domain with 13 out of 95 security vendors marking it as malicious. It was registered through Cloudflare, Inc. and resolved to IP address 104.21.37.85. The domain appeared on at least one security blocklist, and Google Safe Browsing explicitly flagged it for phishing. Its SSL certificate was issued by Google Trust Services / WE1, adding a veneer of legitimacy. The page title returned a 404 error, suggesting the site was taken down or never fully operational. The unique seed 2746b0 was used for this analysis variation.

To protect against such brand impersonation threats, users should always verify URLs before entering credentials or sensitive information. Avoid clicking links from unsolicited messages or emails claiming to be from Coinbase. Enable two-factor authentication and use a password manager to detect lookalike domains. Organizations should implement DMARC and monitor for unauthorized use of their brand. If you suspect exposure, change passwords immediately and report the domain to relevant authorities.