logn-pro-leran[.]daftpage[.]com

This domain, logn-pro-leran.daftpage.com, poses a direct threat by impersonating Coinbase's official sign-in page. Attackers use this site to trick users into entering their account credentials, which are then harvested for unauthorized access to cryptocurrency wallets or financial accounts. The page title explicitly mimics Coinbase's legitimate interface, increasing the likelihood of successful deception. Analysis indicates this domain was registered on October 24, 2021, through OVH, SAS, and resolves to the IP address 216.150.16.193, hosted on Amazon's infrastructure (AS16509). Security vendors on VirusTotal flagged the domain with 18 detections out of 95, while Google Safe Browsing and two additional blocklists classify it as phishing. The SSL certificate, issued by Let's Encrypt, does not mitigate the malicious intent, as encrypted phishing sites are a common tactic to appear legitimate. If you visited logn-pro-leran.daftpage.com or entered credentials on this site, immediately change your Coinbase password and enable multi-factor authentication if not already active. Review your account for unauthorized transactions or suspicious activity. Clear browser cache and cookies to remove any residual tracking elements. Report the incident to Coinbase's security team and monitor connected email accounts for signs of compromise, such as password reset attempts or unusual login alerts.