learn-coinbase-pros[.]daftpage[.]com

The domain learn-coinbase-pros.daftpage.com has been identified as a brand impersonation threat specifically targeting Coinbase. This phishing site was designed to mimic the legitimate Coinbase Pro login page, using the title 'Log-in | Coinbase Pro | Digital Exchange®' to deceive users into entering their credentials. The threat type is a fake login page, which could be used to harvest sensitive financial information and potentially lead to cryptocurrency theft.

Technical analysis reveals that the domain was created on October 24, 2021, and resolves to IP address 216.150.1.193. It was registered through OVH, SAS, and uses an SSL certificate issued by Let's Encrypt / R13. VirusTotal reports that 19 out of 95 security vendors flag this domain as malicious, and it appears on 2 security blocklists. Google Safe Browsing also flags the domain for phishing, underscoring the high risk it poses to users.

As of the latest check, the domain is currently offline, indicating that it has been taken down in response to the threat. However, users should remain vigilant as similar domains may appear. PhishDestroy recommends that users always verify the authenticity of any login page, especially those requesting Coinbase credentials, by visiting the official website directly rather than clicking on links from unsolicited messages or emails. If you have already entered your information on this site, change your passwords immediately and enable two-factor authentication.