web-pro-com[.]pineapple[.]page

This domain, web-pro-com.pineapple.page, operates as a high-risk phishing site designed to impersonate Coinbase Pro, a digital asset exchange platform. The site presents itself as the "Official Site® | Coinbase pro | Digital Asset Exchange" to deceive users into entering sensitive credentials, including login details and financial information. Infrastructure analysis indicates the domain was configured to mimic legitimate Coinbase Pro branding, leveraging social engineering tactics to exploit trust in the targeted brand. The page title and design elements closely resemble the authentic platform, increasing the likelihood of successful credential compromise for unsuspecting victims. Evidence confirms the domain's malicious intent through multiple technical indicators. The domain is flagged by 14 out of 95 security vendors on VirusTotal, including detection as a phishing threat by Google Safe Browsing. It appears on one security blocklist and is blocked by enterprise-grade filtering systems. The domain resolves to the IP address 216.150.1.65, hosted on infrastructure belonging to Amazon.com, Inc. (AS16509) in the United States. Registration details indicate the domain was provisioned through Vercel Inc., and it employs a Let's Encrypt SSL certificate (R13) to create a false sense of security. The domain is currently offline, but its prior operational status and detection metrics confirm its role in credential harvesting campaigns. Users who visited web-pro-com.pineapple.page should take immediate action to mitigate potential compromise. Any credentials entered on the site must be considered exposed and should be changed immediately across all platforms where reused. Affected individuals should enable multi-factor authentication on their accounts, particularly for financial and cryptocurrency services. System scans using updated security tools are recommended to detect any secondary payloads or malware introduced during the interaction. Organizations should update internal blocklists to include this domain and monitor for signs of unauthorized access linked to credentials harvested from this infrastructure. Given the domain's prior association with phishing activity, vigilance is advised for related follow-up attacks, such as targeted phishing emails or fraudulent transaction attempts.