secre-coixbas[.]pineapple[.]page

The domain secre-coixbas.pineapple.page presents a high-risk threat type of brand impersonation, specifically targeting Coinbase users. This domain is designed to deceive users into believing they are accessing an official Coinbase service, thereby risking credential theft. The page title 'Coinbase Sign In – Manage Your Digital Assets' is a direct attempt to mimic the legitimate brand's login page, significantly increasing the risk of unsuspecting users entering their sensitive information.

Detailed analysis reveals that the domain has been flagged by 12 out of 95 security vendors on VirusTotal, indicating a significant recognition of its malicious intent. The domain was registered through Vercel Inc. and resolves to the IP address 216.150.16.129, which is located in the United States and associated with AS16509 (Amazon.com, Inc.). Although the domain is currently offline and appears on one security blocklist, the potential for harm remains notable, particularly given its previous online status. Furthermore, Google Safe Browsing has flagged this domain as phishing, reinforcing the threat it poses.

To mitigate the risk posed by this domain, users are advised to verify URLs before entering sensitive information, especially for financial services. Enabling two-factor authentication (2FA) on accounts can provide an additional layer of security. Regularly monitoring account activity for unauthorized access is also recommended to detect any potential breaches promptly. Organizations should ensure that their staff are trained to recognize brand impersonation attempts and report suspicious domains to security teams for further investigation.