Keamanan domain dan intelijen ancaman

ai[.]base-app[.]net

“CoinbaseWallet”

Putusan ancaman Tinggi 66/100 skor bukti

Ketersediaan Konten tidak tersedia Konten tidak tersedia dalam observasi terbaru

Sinyal risiko

Deteksi Total Virus: 4/94 Daftar blokir yang disimpan cocok: 2 Peniruan identitas merek: ["coinbase"]

03/04/2026 ["coinbase"] 1 Report Sent

Ringkasan bukti

TINGGI

ai.base-app.net is currently classified under investigation for generic phishing activity with an active status. The domain poses a direct threat as it is designed to deceive users into downloading malicious software under the guise of an AI application suite.

ai.base-app.net resolves to IP address 74.211.109.122 and was created on December 25, 2025. The domain is registered with NameSilo, LLC and utilizes a Let's Encrypt SSL certificate for legitimacy signaling. Despite zero detections by VirusTotal (4 out of 95 security vendors), the domain’s recent creation date and lack of historical reputation data significantly elevate its risk profile.

As this phishing campaign is active, users must avoid interacting with ai.base-app.net or downloading any files from the site. Organizations are advised to immediately block the IP address 74.211.109.122 at the network perimeter and update endpoint protection rules to flag the domain. Continuous monitoring of outbound traffic to this domain is recommended to prevent potential compromise.

Snapshot bukti yang dikirim

Dikirim: 2026-04-03 00:32:54 UTC
Catatan buku besar: 1
ID kasus: PD-20260403-959E72
Judul halaman yang direkam: CoinbaseWallet
Artefak PDF: Bukti PDF

Dasar hukum

CFAA · 18 U.S.C. §1030 Wire Fraud · 18 U.S.C. §1343 FTC Act

Teks bukti lengkap

Policy Violations:
Illegal Activities: Active phishing operation targeting victims
Fraud & Deception: Impersonation of legitimate services
Identity Theft: Collection of credentials under false pretenses
Applicable Laws (US):
18 U.S.C. § 1343 - Wire Fraud
18 U.S.C. § 1030 - Computer Fraud and Abuse Act (CFAA)
15 U.S.C. § 45 - FTC Act (Deceptive Practices)
Federal laws prohibit wire fraud, computer fraud, and deceptive business practices.
Action Required: This evidence-backed report demonstrates clear violations requiring suspension per your policies. Continued hosting exposes your organization to regulatory scrutiny and potential legal liability.

VirusTotal

4 det.

DNS Security

1/12

Sertifikat TLS

Let's Encrypt

Usia

4 mo

Status terpantau

Konten tidak tersedia HTTP 502

Daftar Hapus

Terdaftar

Reports Sent

Data Coverage

VirusTotal 4 / 94 URLQuery checked — no detections recorded PhishStats checked — no match recorded OTX no community references CF Radar no data URLScan capture laporan yang disimpan URLScan verdict Analisis selesai Pemblokiran DNS 1/12 TLS valid certificate, 89d WHOIS 4 mo old Tangkapan layar 3 captures · 3 sources Rantai pengalihan tidak diselidiki

Intelijen Keamanan JaringanRegistrar context

Registrar context NameSilo

Stored registration data identifies NameSilo as the registrar. PhishDestroy maintains separate registrar investigations; that broader material is contextual and is not an independent detection for this domain.

Review source investigation

DNS Provider Blocks 1 / 12

Brand Base

Alur Tanggapan Ancaman Pipeline

Penemuan

Checks

Reports

Ketersediaan

16/16

URLScan.io Capture

Stored capture artifacts are available in Intelijen Domain

URLScan Verdict

Analisis URLScan selesai; hasil tangkapan web ini tidak mengubah keputusan ancaman halaman · score 0

29/07/2026

Cloudflare Radar Report

A stored Cloudflare Radar report is available. The report link alone is not a malicious verdict and does not prove that every network field was captured.

VirusTotal

Stored vendor analysis is available in Analisis VirusTotal

23/05/2026

Google Safe Browsing

Checked via Laporan Transparansi Google

03/04/2026

Deteksi Daftar Blokir

Ditemukan di 2 blocklists: MetaMask, SEAL

10/08/2026

DNS Security Blocks

Blocked by 1 of 12 checked DNS providers: Brand base

Registrar Context: NameSilo

Separate registrar research is available. Registrar association is contextual and is not scored as an independent detection.

Brand Impersonation

Impersonation of ["coinbase"]

Forensic Evidence Collected

Stored evidence from URLScan.io, URLQuery, stored screenshot

Technical Analysis Recorded

Laporan tersebut berisi teknologi tersimpan atau hasil analisis forensik.

10/08/2026

Cakupan daftar blokir

10 sumber eksternal dipantau · snapshot tersimpan 10/08/2026

MetaMask Terdaftar PhishDestroy Set data sumber SEAL Terdaftar

8 sumber eksternal dipantau Tidak cocok

ScamSniffer Tidak cocok Polkadot Tidak cocok CryptoFirewall Tidak cocok OpenPhish Tidak cocok Enkrypt Tidak cocok Phishunt Tidak cocok Codeesura Tidak cocok DiscordPhishing Tidak cocok

Laporan komunitas

Dilaporkan oleh 1 anggota komunitas; pertama terlihat 03/04/2026

Laporan tersimpan: 1
URL unik yang dilaporkan: 1

Diterima1

Intelijen komunitas

1 laporan komunitas

KategoriPHISHING

Automated report created by SEAL

Tangkapan tersimpan

Screenshot of ai.base-app.net — **URLScan capture**Capture time unavailable 2 / 3

Lihat Ukuran Penuh Unduh

Judul Halaman

CoinbaseWallet

Impersonates

Coinbase

Sertifikat TLS

Valid transport encryption · Diterbitkan oleh Let's Encrypt · valid for 89 days

Intelijen Domain

Domain

URLScan Verdict Analisis selesai score 0 report ↗

Server / ASN nginx · AS25820 IT7 Networks Inc

Reputasi IP IP abuse confidence 0/100 0 reports checked 14/07/2026

Registrar (base domain) NameSilo

(US) PhishDestroy Investigation

Kontak penyalahgunaanabuse@namesilo.com

Pendaftar ICANNPenyedia layanan pendaftaran resmi yang terakreditasi ICANN →

Pencarian WHOISICANN RDAP untuk base-app.net →

Alamat IP 74.211.109.122

Lokasi

Los Angeles, US

JaringanAS25820 · Cluster Logic Inc

IP terbalikviewdns.info → rapiddns.io →

Registration (base domain)base-app.net · Dibuat 03/04/2026 (129d)

Status HTTP502 Error

Waktu hingga pertama kali tidak tersedia 20 days

Yang kami hitung Waktu yang berlalu sejak laporan penyalahgunaan pertama kali disimpan hingga pengamatan pertama bahwa konten tersebut tidak tersedia. Hal ini tidak dapat menentukan penyebabnya.

Isi setiap laporan Catatan laporan keluar yang disimpan dapat merujuk pada bukti yang tersedia pada saat itu, seperti keputusan vendor, data pendaftaran, detail hosting, klasifikasi, atau tangkapan layar. Halaman ini tidak menyimpulkan secara pasti muatan yang dikirimkan, penerimaan, pengakuan, atau tindakan oleh penerima.

Detail teknisDNS, nama TLS, dan stempel waktu

Pertama Kali Terdeteksi03/04/2026

DOM Analysisanalyzed 29/07/2026DOM analysis score 63/1001 brand signal

Submitted URLhttp://ai.base-app.net/

Server namans1.dnsowl.comns2.dnsowl.comns3.dnsowl.com

Pengamatan TLSdipindai 23/05/2026

ICANN OVERSIGHT Registration: base-app.net

Akreditasi dan konteks RAA

Registrar accreditation and DNS abuse obligations

For the registrable domain base-app.net behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.

Accreditation is a contract, not a safety certification.

RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.

Akreditasi adalah kontrak, bukan cap jaminan keamanan. Verifikasi biaya ICANN Baca RAA §3.18 PHISHDESTROY INVESTIGATIONICANN funding, contracts, and DNS abuse oversight

Accountability draft Tidak ada yang dikirim secara otomatis.

Intelijen Forensik

External Scripts 1

https://performance.radar.cloudflare.com/beacon.js

Laporkan Domain Ini Kirimkan bukti & bantu lindungi orang lain

Analisis VirusTotal

4 / Vendor keamanan 94 menandai domain ini

View on VT

Last analyzed 2026-05-23 16:09:35 UTC

ChainPatrol

alphaMountain.ai

Seclookup

SOCRadar

Analisis Performa Situs

Google PageSpeed Insights — mobile performance audit of ai.base-app.net · checked Apr 3, 2026

Needs Work

Performance

FCP

5.15s

First Contentful Paint

LCP

5.69s

Largest Contentful Paint

CLS

Cumulative Layout Shift

TBT

485ms

Total Blocking Time

5.15s

Speed Index

Domain serupa

255 domain serupa tersimpan

xn--oinbase-ux1c.com homoglyph Laporan internal xn--conbse-sta7g.com homoglyph Laporan internal coinbasez.com addition Laporan internal cainbase.com vowel-swap coenbase.com vowel-swap coibnase.com transposition coinabse.com transposition coinbasecom.com various coinbasi.com vowel-swap coinbaso.com vowel-swap coinbose.com vowel-swap coinbuse.com vowel-swap

Tampilkan semua (88)

conibase.com transposition cuinbase.com vowel-swap ocinbase.com transposition c9inbase.com replacement ccoinbase.com repetition ciinbase.com replacement cinbase.com omission cionbase.com transposition clinbase.com replacement co8nbase.com replacement co9nbase.com replacement coi.nbase.com subdomain coibase.com omission coibbase.com replacement coihbase.com replacement coinase.com omission coinb.ase.com subdomain coinb1se.com replacement coinb2se.com replacement coinbaae.com replacement coinbade.com replacement coinbaee.com replacement coinbas.com omission coinbas3.com replacement coinbas4.com replacement coinbasr.com replacement coinbasse.com insertion coinbasw.com replacement coinbasz.com replacement coinbaxe.com replacement coinbaye.com replacement coinbaze.com replacement coinbsase.com insertion coinbse.com omission coinbsse.com replacement coinbvase.com insertion coinbwase.com insertion coinbwse.com replacement coinbyase.com insertion coinbyse.com replacement coinbzase.com insertion coinbzse.com replacement coingase.com replacement coingbase.com insertion coinhase.com replacement coinhbase.com insertion coinjbase.com insertion coinmbase.com insertion coinnase.com replacement coinsbase.com plural coinvase.com replacement coinvbase.com insertion coionbase.com insertion coiunbase.com insertion cojinbase.com insertion cojnbase.com replacement cokinbase.com insertion colinbase.com insertion conbase.com omission cooinbase.com insertion coonbase.com replacement copinbase.com insertion couinbase.com insertion counbase.com replacement cpoinbase.com insertion cvoinbase.com insertion cxoinbase.com insertion dcoinbase.com insertion doinbase.com replacement fcoinbase.com insertion foinbase.com replacement oinbase.com omission voinbase.com replacement xcoinbase.com insertion xoinbase.com replacement c-oinbase.com hyphenation c0oinbase.com insertion c9oinbase.com insertion cdoinbase.com insertion cfoinbase.com insertion cioinbase.com insertion ckoinbase.com insertion cloinbase.com insertion co-inbase.com hyphenation co0inbase.com insertion co8inbase.com insertion co9inbase.com insertion coi-nbase.com hyphenation

Menampilkan 100 dari 255

Apakah Anda Terpengaruh oleh Situs Ini?

If credentials were compromised, report immediately. Do not engage with recovery scammers.

Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.

FBI IC3

Laporkan kejahatan yang dimungkinkan oleh internet di Amerika Serikat

Federal tips line1-800-CALL-FBI

Europol

Temukan saluran pelaporan resmi untuk negara UE Anda

National police directory

Action Fraud

Laporkan penipuan dan kejahatan dunia maya di Inggris, Wales, dan Irlandia Utara

Contact centre0300 123 2040

PhishDestroy listing review Bukan laporan penegakan hukum

Banding atas Nama Domain

Minta peninjauan jika Anda pemilik domain ini dan yakin cantumannya salah

Waspadalah terhadap penipu yang mengatasnamakan pemulihan! Penjahat dapat menghubungi korban lagi sambil berpura-pura menjadi penyelidik, pengacara, atau agen pemulihan. Jangan membayar biaya di muka atau membagikan kredensial. Pelajari lebih lanjut tentang penipuan dalam proses pemulihan →

Laporkan kepada Pihak Berwenang di Daerah Anda

Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.

Direktori 97 negara

Draf yang dibantu AI — detail insiden diproses oleh penyedia AI Tinjau dan kirimkan sendiri

Tetap Terinformasi, Tetap Aman

Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive

Pemberitahuan Ancaman Real-Time Ajukan Banding Terhadap Iklan Ini

Alat eksternal

ChainPatrol URLQuery Google Safe Browsing SSL Labs Blacklist Checker URLVoid Sucuri SiteCheck MDN Observatory

HTML · IFRAME

Sematkan Laporan Ini

Bagikan informasi ancaman ini di situs web atau blog Anda

embed.html

<iframe
  src="https://phishdestroy.io/id/embed/domain/ai.base-app.net"
  title="PhishDestroy threat report for ai.base-app.net"
  width="100%" height="320"
  loading="lazy"
  referrerpolicy="no-referrer"
  sandbox="allow-same-origin allow-popups allow-popups-to-escape-sandbox"
  style="border:0;border-radius:12px;max-width:100%"
></iframe>

ai[.]base-app[.]net

Ringkasan bukti

Snapshot bukti yang dikirim

Dasar hukum

Data Coverage

Alur Tanggapan Ancaman Pipeline

Cakupan daftar blokir

Laporan komunitas

Intelijen komunitas

Tangkapan tersimpan

Intelijen Domain

Akreditasi dan konteks RAA

Registrar accreditation and DNS abuse obligations

Intelijen Forensik

Analisis VirusTotal

Domain serupa

Apakah Anda Terpengaruh oleh Situs Ini?

Laporkan kepada Pihak Berwenang di Daerah Anda

Periksa Domain Apa Pun

Laporkan Phishing

Pemberitahuan Ancaman Real-Time

Tetap Terinformasi, Tetap Aman

Alat eksternal

Sematkan Laporan Ini

Surat Terima Kasih yang Sangat Tulus

ai[.]base-app[.]net

Ringkasan bukti

Snapshot bukti yang dikirim

Dasar hukum

Data Coverage

Alur Tanggapan Ancaman Pipeline

Cakupan daftar blokir

Laporan komunitas

Intelijen komunitas

Tangkapan tersimpan

Intelijen Domain

Akreditasi dan konteks RAA

Registrar accreditation and DNS abuse obligations

Intelijen Forensik

Analisis VirusTotal

Domain serupa

Infrastruktur dan Laporan Terkait

Content matches 4

Shared IP 74.211.109.122 2

Registrar yang sama: NameSilo 6

["coinbase"] impersonation 5

Laporan ancaman terkini 4

Apakah Anda Terpengaruh oleh Situs Ini?

Laporkan kepada Pihak Berwenang di Daerah Anda

Periksa Domain Apa Pun

Laporkan Phishing

Pemberitahuan Ancaman Real-Time

Tetap Terinformasi, Tetap Aman

Alat eksternal