coiinbaseeprologinn[.]wstd[.]io

This domain, coiinbaseeprologinn.wstd.io, is a confirmed phishing site designed to impersonate the Base cryptocurrency platform. Analysis indicates the site mimics legitimate Base login portals to harvest user credentials, private keys, or other sensitive authentication details. The infrastructure is engineered to deceive users into entering confidential information under the false pretense of accessing their cryptocurrency accounts, posing a direct financial and operational risk to victims. Evidence supporting this assessment includes multiple technical indicators. The domain was registered on February 21, 2026, through NameCheap, Inc., and currently appears on one security blocklist. VirusTotal detection shows 15 out of 95 security vendors flagging the domain as malicious, with Google Safe Browsing specifically categorizing it as phishing. The domain resolves to the IPv6 address 2606:4700:20::681a:8e5, hosted on Cloudflare’s network (AS13335), and uses a Let’s Encrypt SSL certificate with serial number E8. These elements align with known phishing infrastructure patterns, particularly the use of Cloudflare to obscure hosting origins and evade takedown efforts. Users who visited coiinbaseeprologinn.wstd.io should immediately revoke any entered credentials and monitor associated cryptocurrency wallets for unauthorized transactions. If login details were submitted, affected accounts should be secured by resetting passwords and enabling multi-factor authentication where available. Additionally, users should scan their systems for malware, as phishing sites may deploy secondary payloads. Network administrators are advised to block the domain and its resolving IP address at the perimeter to prevent further access. Given the domain’s current offline status, continued vigilance is recommended, as threat actors may re-deploy the infrastructure under a different name or IP.