welcome-secure-pro-coiinbase[.]wstd[.]io

The domain welcome-secure-pro-coiinbase.wstd.io is flagged for brand impersonation, specifically targeting the cryptocurrency platform Base. The domain is currently offline and has been taken down to mitigate potential risks.

Infrastructure analysis reveals that the domain resolves to the IP address 172.67.68.74, which is located in the United States and is associated with AS13335 Cloudflare, Inc. The domain was created on February 21, 2026. It appears on one security blocklist and is flagged by Google Safe Browsing as a phishing site. Additionally, 12 out of 95 security vendors on VirusTotal have flagged this domain as malicious. The SSL certificate is issued by Let's Encrypt with the serial number E8, which is a common sign of a hastily set up fraudulent site. The domain's association with Cloudflare and a Let's Encrypt certificate suggests an attempt to appear legitimate and evade detection.

Given the domain's current offline status, it is recommended that users remain vigilant and avoid any links or communications related to this domain. Security teams should monitor for any resurgence of the domain and consider adding it to internal blocklists to prevent accidental access. Additionally, the brand Base should be informed if not already aware, to enhance their security measures and customer alerts regarding such impersonations.