coinbasebasprologin[.]godaddysites[.]com

PhishDestroy identifies coinbasebasprologin.godaddysites.com as a high-risk Coinbase brand impersonation domain actively circulating in phishing campaigns. This domain masquerades as Coinbase’s official login interface to harvest user credentials and financial data, representing a clear and present threat to cryptocurrency users. The ongoing activity and consistent detection by multiple security vendors underscore the urgent risk this domain poses to unwary visitors.

This domain was flagged by 17 out of 95 VirusTotal security vendors, indicating significant malicious consensus. Registered through GoDaddy.com, LLC on November 18, 2013, the domain resolves to IP address 13.248.243.5 and is protected by a GoDaddy SSL certificate. Google Safe Browsing has marked it under the SOCIAL_ENGINEERING category, confirming its use in deceptive practices. The extended registration history and reputable hosting provider do not legitimize its fraudulent purpose, which remains focused on exploiting trust in the Coinbase brand.

Organizations and individuals should block traffic to coinbasebasprologin.godaddysites.com at the DNS and network levels. Users are advised to verify all links before entering credentials and to access Coinbase only via its official domain (coinbase.com) or bookmarked links. Report any encounters with this domain to your security team or the platform’s fraud reporting channels. Proactive monitoring and user education on brand impersonation tactics are recommended to prevent credential compromise.