faqs-coinbase-sign-in[.]wstd[.]io

This domain is assessed as high risk for brand impersonation, specifically targeting Coinbase users with a fake sign-in page. PhishDestroy classifies this as a credential-harvesting operation designed to steal login credentials and potentially bypass two-factor authentication.

Technical indicators are alarming: VirusTotal shows 13 out of 95 security vendors flagging the domain as malicious. The domain was registered through NameCheap, Inc. on February 25, 2022, and resolves to IP address 104.19.164.34. It uses a Let's Encrypt SSL certificate (E8) to appear legitimate. The page title was "Coinbase - Sign in," and Google Safe Browsing flagged it for phishing. It appears on three security blocklists.

Users should never enter credentials on this domain. If you have already done so, immediately change your Coinbase password and enable 2FA. Monitor your account for unauthorized activity and report any suspicious transactions to Coinbase support. Consider using a password manager and enabling security alerts.