home-pro-coinbase-auth[.]wstd[.]io

The domain home-pro-coinbase-auth.wstd.io is identified as a high-risk phishing resource specifically targeting users of the Coinbase Pro digital asset exchange platform. Analysis confirms this domain operates under the threat category of brand impersonation, replicating the official login interface of Coinbase Pro to deceive victims. As of the latest assessment, the domain has been taken offline, though prior activity remains a documented security concern. Infrastructure analysis reveals the domain was registered through NameCheap, Inc. on February 25, 2022, and resolved to the IP address 104.19.164.34, hosted under AS13335 Cloudflare, Inc. in the United States. Detection metrics indicate the domain was flagged by 18 of 95 security vendors on VirusTotal, while Google Safe Browsing and one additional security blocklist also classified it as malicious. The SSL certificate was issued by Let’s Encrypt, a common choice among threat actors to lend superficial legitimacy to fraudulent sites. Current status confirms the domain is offline, reducing immediate exposure risk. However, organizations and users are advised to implement proactive measures, including domain monitoring for re-registration attempts, integration of known malicious indicators into security controls, and verification of all login portals through official channels. Security teams should also review logs for prior connections to 104.19.164.34 or related subdomains under wstd.io to assess potential compromise.