support-coinbse[.]wstd[.]io

The domain support-coinbse.wstd.io was registered on February 21, 2026 and is currently taken offline. Infrastructure analysis shows it resolves to IP address 104.19.164.34, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The site served an HTTP 401 response, indicating that authentication is required before any content is delivered. The TLS certificate is issued by Let’s Encrypt (subject E8), confirming that encryption is present but does not attest to the legitimacy of the service.

Reputation checks are uniformly negative: Google Safe Browsing flags the domain for social engineering, Gridinsoft assigns a trust score of 0 / 100, and the domain appears on one security blocklist, where it has been blocked by PhishDestroy. VirusTotal analysis reports that 12 of 95 scanning engines flagged the domain, reinforcing the malicious classification. The observed threat vector is a tech‑support scam, consistent with the “support‑” prefix and the known scam type.

While the exact phishing page content, page title, or targeted brand have not been disclosed, the combination of a low trust score, multiple vendor detections, and blocklist inclusion provides strong evidence of malicious intent. Defenders should continue to block the domain at perimeter defenses, update URL filtering and DNS sinkhole rules, and monitor for any future re‑hosting attempts that may use the same IP range or certificate issuer. Incident response teams should treat any traffic to this domain as hostile and advise users to avoid unsolicited support calls that reference the domain.