secure-coin-base-pro-faq[.]square[.]site

The domain secure-coin-base-pro-faq.square.site was identified as a brand impersonation phishing site specifically targeting Coinbase, the well-known cryptocurrency exchange. It posed as an official Coinbase Pro login page, as indicated by its page title 'Official Site® | Coinbase Pro | Digital Asset Exchange® | coinbase login'. Fortunately, the domain has already been taken offline, but its brief existence posed a significant risk to users who may have attempted to log in.

Technical indicators are particularly concerning. VirusTotal flagged the domain with 16 out of 95 security vendors marking it as malicious. It appeared on three security blocklists and resolved to IP address 74.115.51.4. The domain was registered through MarkMonitor, Inc. and was created on March 12, 2026, giving it a very short lifespan. Despite having an SSL certificate (E7), this provided a false sense of security. The domain was flagged by multiple threat intelligence sources, and its registration with a legitimate registrar did not prevent its malicious use.

Because the domain is now offline, the immediate threat has passed. However, users who may have visited the site and entered credentials should change their Coinbase passwords immediately and enable two-factor authentication. PhishDestroy recommends always verifying URLs before entering sensitive information and using official bookmarks for cryptocurrency exchanges. If you suspect your account was compromised, contact Coinbase support without delay. Stay vigilant against similar phishing attempts that may appear in the future.