baseconsultlineinfo[.]netlify[.]app

The domain baseconsultlineinfo.netlify.app is a cryptocurrency phishing site that impersonates Coinbase, specifically targeting users seeking customer support. It poses a high risk of brand impersonation and credential theft. The site is currently taken offline, having been flagged for phishing by Google Safe Browsing and blocked by three security blocklists. No crypto drainer kit was detected on this domain.

Technical analysis shows that baseconsultlineinfo.netlify.app is flagged by 3 of 95 VirusTotal vendors, including ADMINUSLabs, Google Safebrowsing, and Lionic. Google Safe Browsing specifically flags it for SOCIAL_ENGINEERING. The domain was registered on February 21, 2026, through Name.com, Inc (Netlify), and resolves to IP address 35.157.26.135, located in Germany (AS16509 Amazon.com, Inc.). The site uses an SSL certificate issued by DigiCert Inc / DigiCert Global G2 TLS RSA SHA256 2020 CA1, and its observed page title was 'Coinbase Help | Independent Support Service'. It appears on three security blocklists: PhishDestroy, MetaMask, and SEAL. The domain currently returns an HTTP 404 status.

Users who visited baseconsultlineinfo.netlify.app should consider themselves at risk of credential compromise. As this was a brand impersonation phishing site without a drainer kit, the primary threat is login credential theft. Affected users should immediately change any passwords entered on the site, enable two-factor authentication on their Coinbase account, and monitor for unauthorized transactions. To report the domain, submit it to Google Safe Browsing, the impersonated brand Coinbase, and blocklist operators such as PhishDestroy, MetaMask, and SEAL.