io-en-us[.]pro

The domain io-en-us.pro has been identified as a brand impersonation threat specifically targeting the Base cryptocurrency platform. Currently taken offline, this domain employed a crypto drainer designed to steal digital assets from unsuspecting users. The site masqueraded as a legitimate Base service, using the title 'EchoSphere | Acoustic Cryptography & Resonance-Based Data Security' to appear credible, though it was a sophisticated phishing attempt.

Technical analysis reveals that io-en-us.pro was flagged by 7 out of 95 VirusTotal security vendors, indicating moderate detection across the security community. The domain resolved to IP address 188.114.97.3 and appeared on three security blocklists. It was registered through NameSilo, LLC on January 4, 2026, with an SSL certificate issued by Let's Encrypt (R13). Additionally, AlienVault OTX recorded this domain in one threat intelligence pulse, further corroborating its malicious nature. Despite these indicators, the domain's creation date and low blocklist count suggest it was relatively new when taken down.

Given that io-en-us.pro is now offline, users are no longer at immediate risk of encountering the live phishing site. However, PhishDestroy strongly advises caution when interacting with similar domains that impersonate Base or other cryptocurrency brands. Users should always verify URLs through official channels and avoid connecting wallets or entering credentials on unverified sites. For ongoing protection, utilize PhishDestroy's verification tools to check domain legitimacy before engagement. Stay vigilant against evolving phishing tactics targeting the crypto ecosystem.