teste-2[.]baseportal[.]io

Analysis indicates that the domain teste-2.baseportal.io was registered on 2024-09-06 through GoDaddy.com, LLC and currently resolves to IP 66.33.60.66, which belongs to Amazon.com, Inc. (AS16509) and is geolocated in the United States. The host presents an HTTP 200 response and serves a TLS certificate issued by Let’s Encrypt (R12). The page title returned is “Baseportal”. Infrastructure inspection reveals four authoritative name servers—alfred.ns.cloudflare.com, bella.ns.cloudflare.com, ns1.vercel-dns-3.com, and ns2.vercel—indicating use of both Cloudflare and Vercel DNS services. Detected web technologies include Node.js, React, Next.js, Vercel hosting, HSTS enforcement, Google Tag Manager, Facebook Pixel, and Webpack, all consistent with a modern JavaScript‑driven site. Threat intelligence classifies the site as a crypto‑scam and assigns a high risk rating. One of ninety‑five VirusTotal scanners flagged the domain, and the Gridinsoft trust score is 0 out of 100. The domain appears on a single external blocklist and is actively blocked by PhishDestroy. Despite the active status, no public content analysis is available, so the specific phishing lure or credential‑capture mechanism cannot be confirmed. Defenders should treat the domain as malicious, enforce network‑level blocking, add it to endpoint and DNS deny lists, and monitor for any related C2 activity originating from the same IP or name‑server set. Continuous re‑evaluation is advised in case additional detections emerge.