basesupport[.]services

This domain is flagged as a high-risk brand impersonation threat specifically designed to mimic Coinbase, a major cryptocurrency exchange platform. Analysis indicates the site operates as a fraudulent login portal, likely intended to harvest credentials or facilitate unauthorized transactions under the guise of legitimate service interactions. The threat type aligns with patterns observed in crypto-related phishing campaigns, where attackers replicate trusted interfaces to exploit user trust and gain access to sensitive financial accounts. Infrastructure analysis reveals multiple technical indicators supporting this assessment. The domain basesupport.services was registered through Hostinger Operations UAB and currently resolves to the IP address 92.113.16.242. It lacks an SSL certificate, a critical security omission for any financial service site. Security vendors on VirusTotal flag the domain at a rate of 18/95, indicating broad consensus on its malicious nature. The domain appears on three security blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL, further corroborating its fraudulent intent. The page title, 'Coinbase - Buy and Sell Bitcoin, Ethereum, and more with trust,' directly mirrors the legitimate Coinbase branding, reinforcing the impersonation tactic. Mitigation steps for users and organizations include immediate cessation of interaction with the domain. Users who may have engaged with the site should revoke any active sessions, reset credentials for associated accounts, and enable multi-factor authentication where available. Organizations should update security policies to include this domain and its associated IP in blocklists to prevent access. Monitoring for unusual transaction activity or login attempts from unfamiliar locations is strongly advised. Given the domain's current offline status, continued vigilance is necessary as threat actors may re-deploy similar infrastructure under different domains or IPs.