aistockbase[.]com

The domain aistockbase.com is identified as a high-risk phishing resource specializing in brand impersonation targeting Coinbase, a cryptocurrency exchange platform. Analysis confirms the domain is currently offline, though prior activity mimicked Coinbase’s official branding under the page title 'Welcome to Coinbase AI Stock.' This campaign appears designed to deceive users into disclosing sensitive credentials or financial information by leveraging the trust associated with the Coinbase brand. Infrastructure analysis reveals the domain was registered on November 13, 2025, through Gname.com Pte. Ltd., a registrar frequently associated with malicious registrations. The domain resolves to the IP address 172.67.138.58, hosted on Cloudflare’s network (AS13335), a common obfuscation tactic to conceal origin servers. Detection metrics indicate 15 of 95 security vendors on VirusTotal flagged aistockbase.com as malicious, while it appears on at least one security blocklist. Google Safe Browsing explicitly classifies the domain as phishing, and no SSL certificate was present, further reducing trust indicators. The combination of brand impersonation, recent registration, and Cloudflare hosting aligns with known phishing infrastructure patterns. Current status confirms aistockbase.com has been taken offline, though similar campaigns may reemerge under new domains. Organizations and users are advised to block the domain and associated IP (172.67.138.58) at the network level, implement real-time phishing detection mechanisms, and monitor for newly registered domains with similar naming conventions (e.g., 'coinbase' + arbitrary terms). End-users should verify domain authenticity before entering credentials, particularly for financial or cryptocurrency platforms, and report suspicious domains to relevant security teams for further investigation.