colnbase-accountwallet-setting[.]colnbase[.]unkoqed[.]sa[.]com

The domain colnbase-accountwallet-setting.colnbase.unkoqed.sa.com impersonates the cryptocurrency platform Base, aiming to deceive users into revealing sensitive information. This phishing site has been flagged by 2 out of 93 vendors on VirusTotal, indicating its malicious nature. It is also listed on three public blocklists, including PhishDestroy, MetaMask, and SEAL.

Despite being taken down, the domain's brief window of activity highlights the rapid deployment and takedown cycle typical of phishing operations. The domain was created on February 21, 2026, and detected by PhishDestroy on February 26, 2026. This swift action underscores the effectiveness of early detection systems in identifying threats before they can propagate widely.

The phishing site targeted cryptocurrency users by masquerading as a legitimate Base account wallet setting page. Such scams often exploit the urgency and high-value nature of cryptocurrency transactions to trick users into entering their credentials. The platform risk score of 63/100 further emphasizes the potential threat level posed by this domain during its operational period.

Phishing domains like this one exploit the gap between registration and detection by antivirus databases, typically 24-72 hours. PhishDestroy's proactive monitoring captures these threats early, providing a critical window for mitigation. The presence of this domain on public blocklists serves as a reminder of the ongoing need for vigilance in the cryptocurrency space.