basedcoin[.]net

The domain www.basedcoin.net is a phishing site engaged in brand impersonation targeting the cryptocurrency platform 'base'. It was designed to deceive users into connecting wallets under the guise of a legitimate service, posing an elevated risk of financial theft through wallet-connect phishing. As of the latest verification, www.basedcoin.net has been taken offline, though prior activity may still affect users who interacted with the site.

Technical indicators confirm the malicious nature of www.basedcoin.net. The domain was flagged by 1 of 95 VirusTotal security vendors, including alphaMountain.ai, and appeared on 1 security blocklist (PhishDestroy). It was registered through NameCheap, Inc. on March 23, 2024, and resolved to the IP address 66.33.60.193, hosted on Amazon.com, Inc. infrastructure (AS16509) in the US. The SSL certificate was issued by Let's Encrypt (R12), and the observed page title was 'Based Coin 🔵'. The site was detected in 1 AlienVault OTX threat intelligence pulse and employed technologies such as Vercel and HSTS. No drainer kit was identified, but the scam type was classified as 'wallet_connect_phish'.

Users who connected wallets to www.basedcoin.net should immediately revoke all token approvals via a blockchain explorer or a tool like Revoke.cash. Funds should be transferred to a new, secure wallet to prevent unauthorized access. Victims are advised to monitor their accounts for suspicious transactions and report the incident to their wallet provider or a relevant cybersecurity organization. Additionally, the domain can be reported to platforms like Google Safe Browsing, PhishTank, or the impersonated brand's security team for further action.