# basesupport.me — SUSPICIOUS

> PhishDestroy identifies basesupport.me as an active Microsoft 365 credential phishing site. Domain registered August 03, 2025 via Namecheap.

## Summary
PhishDestroy identifies basesupport.me as an active Microsoft 365 credential phishing site designed to steal corporate login details. The threat actor impersonates Microsoft support to trick victims into entering their credentials on a spoofed portal. The domain uses a Let’s Encrypt SSL certificate to appear legitimate and is hosted on IP 2.57.91.215, which has no prior reputation as a hosting provider for Microsoft services.

This domain was flagged through automated analysis and confirmed via VirusTotal with 0 detections out of 95 engines as of the latest scan. The domain was registered on August 03, 2025, only days before the campaign became active, indicating a recent and opportunistic setup. It was registered through Namecheap Inc., a commonly abused registrar known for low oversight in domain registration checks.

If you visited basesupport.me and entered any credentials or personal information, immediately change your Microsoft 365 password and enable multi-factor authentication. Run a full antivirus scan on your device and review recent account activity for unauthorized logins. Report the domain to your IT security team or through Microsoft’s phishing reporting channels. Avoid interacting with unsolicited support messages claiming to be from Microsoft.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-08-03 18:37:13
- Registrar: NAMECHEAP INC
- IP: 2.57.91.215

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/basesupport.me
- PhishDestroy: https://phishdestroy.io/domain/basesupport.me/
- LLM endpoint: https://phishdestroy.io/domain/basesupport.me/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/basesupport.me/
Last updated: 2026-04-03