coimbasel[.]com

This domain, coimbasel.com, is identified as a high-risk brand impersonation threat specifically targeting WordPress users. Analysis confirms its current status as offline, though prior activity involved deceptive hosting practices under the guise of legitimate WordPress services. The domain was designed to mislead users into believing they were accessing an authentic WordPress site, potentially for credential theft or unauthorized data collection. Infrastructure analysis reveals critical indicators: the domain was flagged by 15 of 95 security vendors on VirusTotal, registered through ENOM, INC. on January 03, 2026, and resolved to the IP address 104.37.86.66, hosted by CloudAccess.net, LLC. It appears on three security blocklists, including PhishDestroy and MetaMask, and was explicitly flagged by Google Safe Browsing as phishing. The SSL certificate, issued by Let’s Encrypt (R12), does not mitigate the risk, as malicious actors commonly exploit free certificates to lend false legitimacy. The page title, 'Your WordPress! Site hosted with CloudAccess.net,' further confirms the intent to impersonate WordPress services. As of the latest assessment, coimbasel.com has been taken offline, reducing immediate exposure. However, organizations and users are advised to treat this domain as permanently compromised. Security teams should update blocklists to include the domain and its associated IP (104.37.86.66), monitor for re-registration attempts, and conduct retroactive log analysis to identify prior interactions. Users who may have engaged with the domain should rotate credentials immediately, particularly for WordPress-related accounts, and verify systems for unauthorized access or data exfiltration. Proactive measures, such as domain monitoring and employee awareness training, are recommended to mitigate similar threats.