us-combascoim-ens[.]pineapple[.]page

The domain us-combascoim-ens.pineapple.page has been assessed as a high-risk brand impersonation threat targeting Coinbase. This domain poses a significant threat to users attempting to access legitimate Coinbase services, as it is designed to trick them into providing sensitive information such as login credentials and personal data.

Analysis indicates that us-combascoim-ens.pineapple.page was flagged by Google Safe Browsing as a phishing domain. The domain has been detected as malicious by 15 out of 95 security vendors on VirusTotal, suggesting a moderate level of consensus among security researchers. The domain is registered through Squarespace Domains II LLC and resolves to the IP address 216.150.1.1. It was created on September 21, 2022, and has appeared on one known security blocklist. The SSL certificate is issued by Let's Encrypt, which is a common practice for legitimate websites but does not guarantee the site's trustworthiness. The page title 'Coinbase - Sign In' further reinforces the impersonation attempt, making it appear as if users are accessing a genuine Coinbase login page.

To mitigate the risks associated with this brand impersonation threat, users are advised to always verify the URL of the website they are visiting. Coinbase users should only access the official website through known and trusted bookmarks or by typing the URL directly into their browser. Additionally, enabling two-factor authentication (2FA) on all Coinbase accounts can significantly reduce the likelihood of unauthorized access even if login credentials are compromised. Security teams should consider adding this domain to their blocklists and educating users about the dangers of brand impersonation and the importance of verifying website URLs and SSL certificates.