secure-coinpro-cdn[.]daftpage[.]com

The domain secure-coinpro-cdn.daftpage.com was identified as a brand impersonation phishing site targeting Coinbase users. This threat is categorized as high risk, as it mimics the legitimate Coinbase Pro exchange to harvest sensitive login credentials. The page title displayed was "Coinbase Pro | Digital Asset Exchange®," further deceiving visitors into believing they are on an official platform.

Technical indicators reveal that the domain was created on October 24, 2021, and is registered through OVH, SAS. It resolves to IP address 216.150.16.1 and uses an SSL certificate issued by Let's Encrypt (R13). VirusTotal analysis shows that 10 out of 95 security vendors flag this domain as malicious, and Google Safe Browsing specifically lists it as a phishing threat. Additionally, the domain appears on one security blocklist, reinforcing its malicious reputation.

As of the latest intelligence, the domain has been taken offline, mitigating immediate risk. However, users who may have visited the site or entered credentials should change their Coinbase passwords immediately and enable two-factor authentication. PhishDestroy recommends monitoring accounts for unauthorized activity and reporting any suspicious transactions. Despite being offline, the domain's infrastructure could be reused, so continued vigilance is advised.