# PhishDestroy domain threat record: basisex.cloud Content language: English Canonical HTML report: https://phishdestroy.io/domain/basisex.cloud/ Machine-readable companion: https://phishdestroy.io/domain/basisex.cloud/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-22 17:19:23 UTC - Last availability or vendor check: 2026-10-22 17:19:23 UTC - Stored record updated: 2026-10-22 18:30:22 UTC - VirusTotal detections in the stored snapshot: 0/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 172.67.165.154 - Registrar in stored WHOIS data: Gname.com Pte. Ltd. - Registrar country in stored WHOIS data: SG - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2026-10-20 12:51:50 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a1649f-229f-7759-9c9d-134cd820cc9e/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/basisex.cloud - Certificate Transparency search: https://crt.sh/?q=%25.basisex.cloud - Web Archive lookup: https://web.archive.org/web/*/https://basisex.cloud/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy added basisex.cloud to its blocklist based on an admin report received on 2026-10-22. The intake AI assessment recorded an unknown verdict because the page provided insufficient content for analysis. The domain returned an HTTP 200 response when fetched on the same day, and no further public evidence of malicious activity was observed. How the scam works The current listing does not confirm any particular fraud technique; it merely indicates that the domain is considered suspicious and could be used for phishing, credential harvesting, or other deceptive activities. Without observable malicious content, no specific scam mechanism can be demonstrated for this site. Evidence VirusTotal scanned the domain on 2026-10-21 with 92 engines and reported zero malicious or suspicious detections. Google Safe Browsing checked the site on 2026-10-22 and did not flag it. Cloudflare Radar identified a phishing tag for the domain, while urlscan.io’s machine‑learning engine assigned a high malicious score (98) but its overall verdict remained non‑malicious. OTX listed zero pulses and external blocklists showed no entries as of 2026-10-22. Infrastructure The domain was registered on 2026-10-20 through Gname.com Pte. Ltd. and is hosted behind Cloudflare, resolving to IP addresses 172.67.165.154 and 104.21.15.250. A Let’s Encrypt TLS certificate covering *.basisex.cloud was issued on 2026-10-20 and is valid until 2027-01-18; DNSSEC is not enabled. What to do Visitors should avoid entering any credentials or personal information on the site; if any data was submitted, change associated passwords and monitor accounts for unusual activity. Security teams can block the exact domain name in firewalls and monitor DNS queries for this host. Continue to watch for updated threat intelligence, as the current evidence does not confirm active malicious behavior. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a1649f-229f-7759-9c9d-134cd820cc9e/ Cloudflare Radar report: https://radar.cloudflare.com/scan/082bedf9-3fe7-46bf-9da6-13eeb3874a18 Stored capture screenshot: https://i.ibb.co/m55hNtKR/f2662cd937d1.png Cloudflare Radar screenshot (2026-10-22T17:19:46Z): https://screenshots.phishdestroy.io/cf/082bedf9-3fe7-46bf-9da6-13eeb3874a18.png URLScan screenshot (2026-10-22T04:05:47Z): https://screenshots.phishdestroy.io/us/01a161c9-35ef-72dc-818d-d2077f8819eb.png URLScan capture report: https://urlscan.io/result/01a161c9-35ef-72dc-818d-d2077f8819eb/ URLScan screenshot (2026-10-22T17:11:35Z): https://screenshots.phishdestroy.io/us/01a16498-aa4e-721a-a4f0-7e71137efa90.png URLScan capture report: https://urlscan.io/result/01a16498-aa4e-721a-a4f0-7e71137efa90/ URLScan screenshot (2026-10-22T17:13:06Z): https://screenshots.phishdestroy.io/us/01a1649a-0670-7578-8d3b-ecd3702e315b.png URLScan capture report: https://urlscan.io/result/01a1649a-0670-7578-8d3b-ecd3702e315b/ VirusTotal report: https://www.virustotal.com/gui/domain/basisex.cloud Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=basisex.cloud Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-22 17:20:59 UTC ## Stored page captures - Primary capture: https://i.ibb.co/m55hNtKR/f2662cd937d1.png Captured: 2026-10-22 17:19:23 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a1649f-229f-7759-9c9d-134cd820cc9e.png Captured: 2026-10-22 17:19:23 UTC Source report: https://urlscan.io/result/01a1649f-229f-7759-9c9d-134cd820cc9e/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/082bedf9-3fe7-46bf-9da6-13eeb3874a18.png Captured: 2026-10-22 17:19:46 UTC Source report: https://radar.cloudflare.com/scan/082bedf9-3fe7-46bf-9da6-13eeb3874a18 SHA-256: 5b685b6fd0c356b8389e33596a40c60d2f63ca6aac5f9ec6250f109105361924 - URLQuery: https://screenshots.phishdestroy.io/uq/f8785b84-0ff3-40ec-8ac5-f7ae826237a6.png Source report: https://urlquery.net/report/f8785b84-0ff3-40ec-8ac5-f7ae826237a6 SHA-256: f03a3dca5d89e3676cf09763c33f29de42e11504ef7ba7717ae059d6cee55391 - URLScan · 2026-10-22: https://screenshots.phishdestroy.io/us/01a161c9-35ef-72dc-818d-d2077f8819eb.png Captured: 2026-10-22 04:05:47 UTC Source report: https://urlscan.io/result/01a161c9-35ef-72dc-818d-d2077f8819eb/ SHA-256: 9474e9d2bd2441c2e4378926179283c65d71f16f79cedab21cca107f693da9af - URLScan · 2026-10-22: https://screenshots.phishdestroy.io/us/01a16498-aa4e-721a-a4f0-7e71137efa90.png Captured: 2026-10-22 17:11:35 UTC Source report: https://urlscan.io/result/01a16498-aa4e-721a-a4f0-7e71137efa90/ SHA-256: f894de683593713758054e22436c32d24234158dbc99b2eada74b028bc133b7f - URLScan · 2026-10-22: https://screenshots.phishdestroy.io/us/01a1649a-0670-7578-8d3b-ecd3702e315b.png Captured: 2026-10-22 17:13:06 UTC Source report: https://urlscan.io/result/01a1649a-0670-7578-8d3b-ecd3702e315b/ SHA-256: 1d642fc4208b7c47797882f74f98ed3524fe77ce51f0eabbc9fbb7c93198cf50 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-22T17:20:13Z", "uuid": "01a1649f-229f-7759-9c9d-134cd820cc9e", "scanned_at": "2026-10-22T17:18:42Z", "final_url": "https://basisex.cloud/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://basisex.cloud/", "from": "http://basisex.cloud/", "status": 307 } ], "ip": "104.21.15.250", "domains": [ "java-vue-bucket.oss-cn-hongkong.aliyuncs.com", "webapi.basis138dev.com", "vip-cservice.com", "oss.awsossli.com", "static.cloudflareinsights.com" ], "ips": [ "47.79.64.174", "172.67.199.81", "47.79.50.63", "104.26.15.227", "104.16.79.73", "104.21.15.250" ], "asns": [ "45102", "13335" ], "countries": [ "HK", "SG" ], "link_domains": [ "www.youtube.com", "www.facebook.com", "www.instagram.com", "x.com" ], "social": [ "https://www.youtube.com/channel/UCB35ypzMECIEkYb7l9c1fGw", "https://www.facebook.com/profile.php", "https://www.instagram.com/worldwealth_mg/profilecard", "https://x.com/worldwealth_mg" ], "doc_hash": "313e799099c5c69ca7b12ca1cf2fe6ca7f93e7b65b3a5db94d1c3c65282a57a3", "script_hashes": [ "bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb", "47becde7896f6f1cc98e999e1ce4a7efe7e9087bf71310e9645bd2b56918c94d", "2d1b6144e17f0f5e1df43eded0a308f9edb6cac9500af4fdbe2f833413ae3428", "febed01e02ba191637eb30c30a6b95d87c9d5d33405753134c1af9047b073660", "72eba3ed721faf3f1b810b76f2ec6ab8f2dc1adf6b9a51eb8df9795753c8c00d", "9dde9ab039a35621ccad50314b58966453e30cd1c9cd5037256b6cac80ed169d", "dcfb304f5676a5058424f06d6d02ff1a383faf7c2ace8a01a8934671e69a0275", "0a32c9c8498ed1d035c753ef03463c5edc73608cd790e0a6b948f4160b29a80c", "b3dd7ff42604f33ec66b7cd68c94c049bfe6bf89a5c66f8f6ac8f6a042beef93" ], "globals": [ "global", "TradingView", "lib", "rem", "dpr", "__VUE_INSTANCE_SETTERS__", "__INTLIFY_PROD_DEVTOOLS__", "__INTLIFY_JIT_COMPILATION__", "__INTLIFY_DROP_MESSAGE_COMPILER__", "__VUE_I18N_FULL_INSTALL__", "__VUE_I18N_LEGACY_API__", "setImmediate", "clearImmediate", "PubSub", "__config", "__theme", "__VUE__", "__vite_is_modern_browser", "__cfBeacon", "setVH", "initViewportHeight", "loadChatStyle", "pageOk", "initBlzxService", "blzx" ], "storage_keys": [ "THEME", "main", "isClose", "LANGUAGE" ], "tls": { "san": [ "*.basisex.cloud", "basisex.cloud" ], "cipher": "AES_128_GCM", "issuer": "YE2", "subject": "basisex.cloud", "protocol": "TLS 1.3", "valid_to": "2027-01-18T14:06:41Z", "valid_from": "2026-10-20T14:06:42Z" }, "domain_age_days": 1, "apex_age_days": 1, "tls_age_days": 2, "tls_valid_days": 89, "requests": 113, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 98, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "cloudflare", "content-type": "text/html", "strict-transport-security": "max-age=31536000" } }, "cf": { "v": 1, "fetched_at": "2026-10-22T17:20:15Z", "uuid": "082bedf9-3fe7-46bf-9da6-13eeb3874a18", "scanned_at": "2026-10-22T17:19:46Z", "final_url": "https://pc.basisex.cloud//", "status": 200, "history": [ { "url": "https://basisex.cloud/", "status": 200 }, { "url": "https://pc.basisex.cloud//", "status": 200 } ], "dom_hash": "411b8189160df01f4d1f37811ccbdd47733f70a83d8f3e206fe91bffe34ede8e", "doc_hash": "cd9f2abedfaadd2d82e0c4c20ded8744eaa702a6b60f51fa268e4cb1a93384c8", "phishing_v2": [ "phishing" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "basisex.cloud", "type": "A", "value": "104.21.15.250" }, { "name": "basisex.cloud", "type": "A", "value": "172.67.165.154" }, { "name": "basisex.cloud", "type": "AAAA", "value": "2606:4700:3034::ac43:a59a" }, { "name": "basisex.cloud", "type": "AAAA", "value": "2606:4700:3034::6815:ffa" }, { "name": "pc.basisex.cloud", "type": "A", "value": "104.21.15.250" }, { "name": "pc.basisex.cloud", "type": "A", "value": "172.67.165.154" }, { "name": "pc.basisex.cloud", "type": "AAAA", "value": "2606:4700:3034::6815:ffa" }, { "name": "pc.basisex.cloud", "type": "AAAA", "value": "2606:4700:3034::ac43:a59a" } ], "dnssec_valid": false, "ip": "104.21.15.250", "whois": { "registrar": "Gname.com Pte. Ltd.", "created": "2026-10-20T14:51:49Z", "updated": "2026-10-20T14:57:15Z", "expires": "2027-10-20T14:51:49Z", "nameservers": [ "jermaine.ns.cloudflare.com", "romina.ns.cloudflare.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-22T17:19:40Z", "analysis_at": "2026-10-21T07:39:21Z", "stats": { "timeout": 0, "harmless": 53, "malicious": 0, "suspicious": 0, "undetected": 39 }, "reputation": 0, "registrar": "Gname.com Pte. Ltd.", "created": "2026-10-20T14:51:49Z", "expires": "2027-10-20T14:51:49Z", "updated": "2026-10-20T14:57:15Z", "first_seen": "2026-10-20T16:09:59Z", "dns": [ { "ttl": 300, "type": "A", "value": "104.21.15.250" }, { "ttl": 21600, "type": "NS", "value": "romina.ns.cloudflare.com" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "jermaine.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "jermaine.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "172.67.165.154" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3034::6815:ffa" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3034::ac43:a59a" } ], "dns_at": "2026-10-21T07:39:33Z", "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c", "cert": { "san": [ "*.basisex.cloud", "basisex.cloud" ], "issuer": "Let's Encrypt / YE2", "serial": "616453627eee288cc575fb59ebccc53bc9e", "sha256": "580c1be8b4c9dfe7f109f933d7d8616f1fa97f4a9ba61594f66323a752b958f7", "subject": "basisex.cloud", "valid_to": "2027-01-18T14:06:41Z", "valid_from": "2026-10-20T14:06:42Z" }, "whois": { "registrar": "Gname.com Pte. Ltd.", "registrar_iana_id": "1923", "registrar_url": "https://www.gname.com/", "created": "2026-10-20T14:51:49Z", "updated": "2026-10-20T14:57:15Z", "expires": "2027-10-20T14:51:49Z", "status": [ "addPeriod", "clientTransferProhibited" ], "nameservers": [ "jermaine.ns.cloudflare.com", "romina.ns.cloudflare.com" ], "dnssec": "unsigned" }, "rdap": { "status": [ "client transfer prohibited" ], "events": { "expiration": "2027-10-20T14:51:49Z", "registration": "2026-10-20T14:51:49Z", "last update of RDAP database": "2026-10-20T14:57:15Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-22T17:20:37Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "basisex.cloud" }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "social_tags": { "robots": "all", "themeColor": "#ffffff" }, "trackers": { "requests": 68 }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 200, "timings": { "dns": 8, "tls": 49, "wait": 545, "connect": 6, "download": 0 }, "response_ms": 608 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1", "TLSv1.1", "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443, 8080 ] }, "carbon": { "bytes": 3211, "co2_grams": 0.0001, "cleaner_than": 95 }, "dns_server": { "ns": [ { "ip": "162.159.44.157", "host": "jermaine.ns.cloudflare.com" }, { "ip": "108.162.194.159", "host": "romina.ns.cloudflare.com" } ], "zone": "basisex.cloud" }, "location": { "ip": "2606:4700:3034::ac43:a59a", "asn": "13335", "org": "Cloudflare, Inc.", "city": "Toronto", "country": "CA" }, "ssl": { "issuer": "Let's Encrypt / YE2", "subject": "basisex.cloud" }, "dns": { "A": [ "172.67.165.154", "104.21.15.250" ], "NS": [ "jermaine.ns.cloudflare.com", "romina.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"jermaine.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2418023590, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}", "AAAA": [ "2606:4700:3034::ac43:a59a", "2606:4700:3034::6815:ffa" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "header": "max-age=31536000", "message": "HSTS header does not include all subdomains." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": "max-age=31536000", "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "firewall": { "waf": "Cloudflare", "has_waf": true }, "get_ip": { "ip": "2606:4700:3034::ac43:a59a", "family": 6 }, "redirects": { "chain": [ "https://basisex.cloud" ] }, "subdomains": { "count": 2, "subdomains": [ "pc.basisex.cloud", "www.basisex.cloud" ] }, "tech_stack": { "technologies": [ "Vue.js", "PubSubJS", "HSTS", "Cloudflare", "Vite", "HTTP/3" ] }, "whois": { "registrar": "Gname.com Pte. Ltd.", "created": "2026-10-20T14:51:49Z", "updated": "2026-10-20T14:57:15Z", "expires": "2027-10-20T14:51:49Z", "status": [ "clientTransferProhibited https://icann.org/epp", "addPeriod https://icann.org/epp" ], "nameservers": [ "jermaine.ns.cloudflare.com", "romina.ns.cloudflare.com" ] }, "headers": { "headers": { "server": "cloudflare", "content-type": "text/html", "strict-transport-security": "max-age=31536000" } } } } ```