helpcoinbase-pros[.]daftpage[.]com

helpcoinbase-pros.daftpage.com is a high-risk domain engaged in brand impersonation, specifically targeting Coinbase users. Currently offline, this site was designed to steal login credentials by mimicking the Coinbase Pro login page. The page title, 'Log-in | Coinbase Pro | Digital,' clearly indicates its fraudulent intent. PhishDestroy identifies this as a sophisticated phishing attempt that exploits trust in the Coinbase brand to harvest sensitive information.

Technical analysis reveals that this domain was flagged by 16 out of 95 security vendors on VirusTotal, confirming its malicious nature. It appears on two security blocklists and is flagged by Google Safe Browsing as phishing. The domain was created on October 24, 2021, and registered through OVH, SAS. It resolves to IP address 216.150.1.65 and uses an SSL certificate issued by Let's Encrypt (R13), which gives it a false sense of legitimacy. Despite being taken offline, the infrastructure behind it could be reused for future attacks.

Given the high risk and specific targeting of Coinbase users, PhishDestroy strongly advises against interacting with this domain or any similar URLs. Users who may have entered credentials should immediately change their Coinbase passwords and enable two-factor authentication. Monitor accounts for unauthorized activity and report any suspicious transactions. Stay vigilant against such phishing attempts by verifying URLs before logging in and using official channels to access financial platforms.