# base-coin.icu — MALICIOUS > Analyze base-coin.icu, a suspicious domain linked to phishing activity. Learn about its risks and current investigation status here. ## Summary PhishDestroy identifies base-coin.icu as a potentially malicious domain exhibiting signs of generic phishing behavior. Despite no detections reported by VirusTotal, the domain is classified as under investigation due to its suspicious characteristics and recent creation date. The domain base-coin.icu resolves to IP address 188.114.97.3 and was registered via PDR Ltd. d/b/a PublicDomainRegistry.com on February 23, 2026. Although no security vendors have flagged it yet, its use of the ".icu" TLD and registration through a known registrar used frequently for fraudulent sites raise concerns about its intent. This infrastructure information supports ongoing scrutiny. Currently, base-coin.icu remains active and monitored by PhishDestroy for emerging threat intelligence. Users and organizations are advised to exercise caution and consider blocking or closely inspecting traffic related to this domain until further verification is complete. The investigation status reflects a precautionary approach to potential phishing risks associated with this domain. ## Threat Details - Verdict: MALICIOUS - Site status: dead (HTTP 403) - Scam type: Airdrop Scam - Page title: Airdrop Claim ## Domain Intelligence - Registered: 2026-03-07 03:07:01 - Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com - Country: IN - IP: 188.114.97.3 - IP Country: US - IP City: San Francisco - IP Org: AS13335 Cloudflare, Inc. - Nameservers: ["demi.ns.cloudflare.com", "eoin.ns.cloudflare.com"] - SSL Issuer: none ## Detection Status - VirusTotal: 14 vendors flagged Vendors: ["ADMINUSLabs", "alphaMountain.ai", "BitDefender", "CRDF", "CyRadar", "Emsisoft", "Fortinet", "G-Data", "Gridinsoft", "Kaspersky", "Netcraft", "SOCRadar", "Sophos", "URLQuery"] - Google Safe Browsing: clean - Blocklists: 3 hits Lists: ["PhishDestroy", "MetaMask", "SEAL"] ## Evidence - Screenshot: https://i.ibb.co/Fq6P44g4/cb4d34e9b17d.png - Cloudflare Radar: https://radar.cloudflare.com/scan/97354050-3e1f-41a7-a033-420eda9d5f49 - Wayback Machine: https://web.archive.org/web/https://base-coin.icu - PhishDestroy: https://phishdestroy.io/domain/base-coin.icu/ - LLM endpoint: https://phishdestroy.io/domain/base-coin.icu/llm.txt ## If You Visited This Site 1. Change any passwords you may have entered 2. Enable 2FA on all related accounts 3. Monitor your accounts for unauthorized activity 4. Report to: FBI IC3, Europol, local authorities --- Report by PhishDestroy | https://phishdestroy.io/domain/base-coin.icu/ Last updated: 2026-03-19