kyc-basewallet[.]com

This domain presents an elevated risk due to its specific impersonation of Coinbase, a major cryptocurrency exchange. The site was designed to trick users into believing they were on a legitimate Coinbase platform, as evidenced by its page title mimicking Coinbase's branding. Such brand impersonation threats are particularly dangerous because they exploit user trust to harvest login credentials, financial information, and other sensitive data.

Technical analysis reveals several red flags: the domain was created very recently on February 27, 2026, and registered through NiceNIC International Group Co., Limited, a registrar often associated with malicious domains. It resolves to IP address 104.21.43.143 and lacks an SSL certificate, meaning any data transmitted would be unencrypted and vulnerable to interception. VirusTotal data shows that 4 out of 95 security vendors flagged this domain as malicious, and it appears on one security blocklist. These indicators collectively confirm the domain's malicious intent and highlight the importance of robust detection mechanisms.

To protect against such Coinbase impersonation threats, users should always verify website URLs before entering credentials, ensure the site uses HTTPS with a valid certificate, and enable two-factor authentication on their Coinbase accounts. Security teams should block this domain at the network level and add it to threat intelligence feeds. PhishDestroy recommends reporting any similar suspicious domains to the impersonated brand and relevant cybersecurity authorities to help takedown efforts and prevent future attacks.