c0inbase[.]site

On July 23, 2026, analysis of the domain c0inbase.site was completed. The domain was created on July 19, 2025 and is registered through HOSTINGER operations, UAB. DNS resolution points to the IPv4 address 92.113.16.37, which belongs to AS47583 Hostinger International Limited and is geolocated in Germany. The authoritative nameservers are ns1.dns-parking.com and ns2.dns-parking.com, both typical of parking services. No TLS certificate was observed, indicating that the site was served over plain HTTP.

The site’s only visible content, as captured before takedown, displayed the page title “Secure Wallet Verification,” and it was classified as a crypto‑related scam that impersonates the brand “base.” The domain is listed on a single security blocklist and is explicitly blocked by the PhishDestroy feed. Google Safe Browsing categorizes the URL as social engineering. VirusTotal scans returned 12 positive detections out of 95 vendor engines, confirming malicious intent. Gridinsoft assigned a trust score of 0 out of 100, reinforcing the low reputation. The current operational status is offline, suggesting that the host or registrar has taken the site down after detection.

Evidence gaps remain regarding the exact phishing kit used, the specific URLs served, and any victim interaction logs, as no page content beyond the title has been publicly disclosed. Defenders should continue to monitor the IP address 92.113.16.37 for any residual activity, block the domain and its host at network perimeter devices, and add the associated IP range to threat intelligence feeds. Additionally, organizations that use the “base” brand should educate users about unsolicited wallet verification requests and enforce strict verification procedures. Ongoing collaboration with the registrar and hosting provider may facilitate rapid takedown of any re‑hosted replicas.