teste-assinatura[.]baseportal[.]io
“Baseportal”
teste-assinatura.baseportal.io — Gizlenmiş · ulaşılabilir. Dolandırıcılık türü: Crypto Scam. Kanıt özeti: VirusTotal 12/91 (BitDefender, Chong Lua Dao, CRDF, CyRadar, ESET); cloaking observed; PhishDestroy score 86/100. Kayıt kuruluşu: GoDaddy.
Özgün adli kaydı korumak için aşağıdaki ayrıntılı PhishDestroy AI analizi İngilizce bırakılmıştır.
The domain teste-assinatura.baseportal.io was registered on September 6, 2024 through GoDaddy.com, LLC and remains active as of the report date, July 24, 2026. Infrastructure analysis shows the domain resolves to IP address 66.33.60.129, which belongs to Amazon.com, Inc. (AS16509) and is hosted in the United States. DNS resolution is served by Cloudflare name servers alfred.ns.cloudflare.com and bella.ns.cloudflare.com, as well as Vercel name servers ns1.vercel-dns-3.com and ns2.vercel. The web server returns HTTP status 200 and presents a TLS certificate issued by Let’s Encrypt (R13), indicating proper HTTPS support. The page title returned from the host is "Baseportal". Technology fingerprints identify a Node.js stack with React, Next.js, Webpack, and Vercel deployment, alongside HSTS enforcement and the presence of Google Tag Manager and Facebook Pixel scripts.
Security telemetry flags the domain as high‑risk. Gridinsoft assigns a trust score of 0 out of 100. VirusTotal scans reported six detections out of ninety‑five vendors, and the domain appears on one public blocklist. It has been explicitly blocked by the PhishDestroy service, confirming its use in phishing campaigns. The known scam classification is a crypto‑related scam, consistent with the generic phishing threat type recorded.
Defenders should treat any traffic to this host as malicious. Immediate actions include adding the domain to outbound and inbound blocklists, monitoring for related C2 communications from the Amazon‑hosted IP, and updating URL filtering policies to cover the identified page title and TLS fingerprint. Continuous re‑scanning with multi‑vendor engines is advised, as additional detections may emerge. Because the site hosts tracking pixels, network‑level inspection of outbound requests to Google and Facebook endpoints can reveal compromised user activity.
Tehdit Müdahale Pipeline
Genel Engelleme Listesi Durumu
Teknolojiler · 8 identified
JavaScript runtime built on Chrome V8 engine for server-side development.
JavaScript library for building user interfaces with component-based architecture.
Cloud platform for frontend deployment, optimized for Next.js.
React framework for production with hybrid static and server rendering.
HTTP Strict Transport Security — forces browsers to use HTTPS connections only.
Tag management system for deploying marketing and analytics tags.
tagmanager.google.comConversion-tracking pixel by Meta — logs page views and custom events to Facebook/Instagram ad accounts.
www.facebook.comModule bundler for modern JavaScript applications.
VirusTotal Analizi
Arşivlenmiş Kanıtlar
Site Performans Analizi
Google PageSpeed Insights — mobile performance audit of teste-assinatura.baseportal.io · checked Mar 6, 2026
Kanıtlar ve Dış Raporlar
Bu Siteden Etkilendiniz mi?
Hesap kimlik bilgilerini, kişisel bilgileri veya ödeme bilgilerini girdiyseniz ya da bu alan adından bir dosya indirdiyseniz hemen harekete geçin. Aşağıda olayı bildirmenize ve kendinizi korumanıza yardımcı olacak kaynaklar bulunmaktadır.
Yerel Yetkililere Bildirin
resmi siber suç iletişim bilgileri veya şikayet taslağı oluştur → almak için ülkenizi seçin.
Herhangi Bir Alan Adını Kontrol Et
Saklanan engelleme listesi, WHOIS, DNS ve genel tarama kanıtlarını kullanarak tehdit analizi
Şimdi TaraOltalama Olayını Bildir
Şüpheli alan adlarını tehdit veritabanımıza bildirin — topluluğu koruyun
BildirCanlı Tehdit Akışı
Son kimlik avı raporları ve gözlemlenen kullanılabilirlik değişiklikleri
İzleGelişmelerden Haberdar Olun, Güvende Kalın
Canlı tehditleri izleyin veya bunun yanlış bir uyarı olduğunu düşünüyorsanız bu kayda itiraz edin