m[.]bahusande[.]com

The domain m.bahusande.com has been identified as a high-risk brand impersonation threat, specifically targeting the Aave brand. The page title 'Coinbase Wallet - Your key to the world of crypto' is misleading and designed to deceive users into believing they are interacting with a legitimate Coinbase service.

Analysis indicates that m.bahusande.com has been flagged by 18 out of 95 security vendors on VirusTotal, suggesting a moderate level of detection. The domain is registered through ENOM, INC. and resolves to the IP address 190.115.21.159, which is located in Belize and is part of the AS59692 IQWeb FZ-LLC network. The domain was created on October 07, 2025, and currently appears on two security blocklists, including PhishDestroy and PhishingDB. Google Safe Browsing has also flagged this domain as a phishing site. The lack of an SSL certificate further diminishes its trustworthiness.

Given the high risk level and the specific nature of the brand impersonation, it is recommended that users avoid accessing m.bahusande.com and report any interactions with this domain to their security teams. Network administrators should update their DNS blocklists to include this domain and its associated IP address. Additionally, implementing robust user education programs on recognizing phishing attempts and verifying URLs can significantly reduce the likelihood of successful impersonation attacks.