tcloudbaseapp[.]com[.]ouowoh[.]cn

The domain tcloudbaseapp.com.ouowoh.cn is a confirmed phishing site engaged in brand impersonation targeting Base, a cryptocurrency platform. It operated as a crypto scam under the guise of a legitimate service but did not deploy a drainer kit. As of the latest verification, tcloudbaseapp.com.ouowoh.cn has been taken offline.

Technical indicators confirm the malicious nature of tcloudbaseapp.com.ouowoh.cn. The domain was flagged by 2 of 95 security vendors on VirusTotal, including Fortinet and Gridinsoft, and appeared on 1 security blocklist (PhishDestroy). It was registered through 阿里云计算有限公司（万网） on June 18, 2025, and resolved to the IP address 45.207.211.237, hosted in Hong Kong under AS137899 I LAYER LIMITED. No SSL certificate was present, and the observed page title was '天气小工具'. Nameservers were dns9.hichina.com and dns10.hichina.com. Google Safe Browsing did not flag the domain at the time of assessment.

Victims of tcloudbaseapp.com.ouowoh.cn should immediately revoke any token approvals granted to unknown contracts and transfer remaining funds to a new wallet. Monitor transaction history for unauthorized activity and report the incident to the impersonated brand, Base. Additionally, report the domain to platforms like PhishTank or the Anti-Phishing Working Group to aid in takedown efforts. If credentials were entered, change passwords and enable two-factor authentication on all related accounts.