sso-faq-coinbaspro[.]daftpage[.]com

This domain presents a high-risk brand impersonation threat, specifically designed to mimic the Coinbase Pro login page and steal user credentials. It was flagged by 17 out of 95 security vendors on VirusTotal, indicating widespread recognition as malicious. The domain was created on October 24, 2021, and resolved to IP address 216.150.16.1, registered through OVH, SAS with an SSL certificate from Let's Encrypt (R13). It appears on two security blocklists and was flagged by Google Safe Browsing as phishing. The page title 'Official Site® | Coinbase Pro | Digital Asset Exchange®' is a clear attempt to deceive users into believing they are on a legitimate Coinbase Pro site.

Given that the domain is now offline, users who may have visited it earlier should take immediate action. For a brand impersonation threat like this, the primary risk is credential theft and potential financial loss. Users should change their Coinbase account passwords and enable two-factor authentication (2FA) if not already active. It is also advisable to monitor account activity for any unauthorized transactions. PhishDestroy recommends reporting the domain to relevant authorities and educating users to always verify URLs before entering sensitive information. Avoid clicking on links from unsolicited messages and ensure the official domain (coinbase.com) is used for all cryptocurrency transactions.