pro-coinbase-web[.]wstd[.]io

pro-coinbase-web.wstd.io is a subdomain of wstd.io. PhishDestroy first observed the hostname on Feb 26, 2026. The hostname explicitly references Coinbase; stored content metadata identifies the same apparent target. Evidence score: 92/100 (critical).

5 independent sources recorded positive findings: VirusTotal, Google Safe Browsing, DNS security resolvers, Cloudflare Radar, and URLScan. VirusTotal recorded 14 detections among 95 engines: ADMINUSLabs, ChainPatrol, alphaMountain.ai, CyRadar, ESET, Forcepoint ThreatSeeker, Fortinet, Google Safebrowsing on Jul 18, 2026 at 18:45 UTC. Google Safe Browsing flagged the domain: Social Engineering on Mar 2, 2026 at 20:51 UTC. DNS security checks returned 8 blocking results across 14 tested policies: Brand Base, Brand Coinbase, Cloudflare Family, Cloudflare Security, Control D Adblock, Control D Family, Control D Malware, Quad9 Secure; no observation timestamp was retained. Cloudflare Radar classified the hostname as malicious and placed it in the phishing category; its verdict timestamp was not retained.

HTTP 401 was recorded on Aug 9, 2026 at 02:09 UTC. Registration records for the registrable domain wstd.io list NameCheap, Inc. as the registrar and Feb 21, 2026 as the creation date. At collection time, the hostname resolved to 104.19.163.34 on AS13335 (CLOUDFLARENET, US). The evidence archive retains 2 visual captures from PhishDestroy and URLScan.