cfbf[.]d2onuj9nfjlz62[.]amplifyapp[.]com

The domain cfbf.d2onuj9nfjlz62.amplifyapp.com is flagged for engaging in high-risk brand impersonation of Coinbase. The page title 'Download Coinbase Wallet - Official Website' suggests an attempt to mislead users into believing they are interacting with the legitimate Coinbase service, which could result in the theft of personal and financial information.

Infrastructure analysis reveals that the domain is registered through NOM-IQ Ltd dba Com Laude and was created on April 17, 2018. It is currently offline and resolves to the IP address 18.245.46.101, which is located in Germany (DE) and is associated with AS16509 Amazon.com, Inc. According to VirusTotal, 10 out of 95 security vendors flag this domain as malicious, and it appears on 1 security blocklist. Additionally, Google Safe Browsing has flagged the domain for phishing, and it is blocked by PhishDestroy. The lack of an SSL certificate further indicates a lack of security and authenticity, making it a high-risk site for users.

If users have visited this domain, they should immediately check their Coinbase account for any unauthorized activity. It is recommended to change passwords and enable two-factor authentication (2FA) on all relevant accounts. Users should also monitor their financial statements for any suspicious transactions and report any incidents to their financial institutions and Coinbase support. Security experts advise against clicking any links or downloading any files from this domain and recommend using official Coinbase channels for all transactions and interactions.