modebitnex-it[.]net

This domain, modebitnex-it.net, is identified as a high-risk brand impersonation threat specifically targeting Base, a cryptocurrency platform. Analysis confirms the domain is currently offline, though prior activity involved presenting itself as an official Italian trading platform under the guise of "ModeBitnex - Piattaforma Ufficiale Italia | Trading IA 2026." The domain was designed to deceive users into believing it was a legitimate Base-affiliated service, likely for the purpose of credential theft or cryptocurrency drainer deployment. Infrastructure analysis reveals the domain was registered on February 21, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com. It resolved to the IP address 104.21.17.248 and was flagged by 14 of 95 security vendors on VirusTotal. The domain appears on four distinct security blocklists and is blocked by multiple detection systems, including MetaMask and SEAL. Gridinsoft assigned a trust score of 0/100, further corroborating its malicious classification. The domain has since been taken offline, though residual risk remains for users who may have interacted with it prior to deactivation. Security teams are advised to monitor for any resurgence of this domain or similar impersonation attempts targeting Base. Users should verify the authenticity of any trading platform by cross-referencing official Base communication channels and avoid engaging with unsolicited or unofficial domains. Network-level blocking of the IP 104.21.17.248 and related indicators is recommended for proactive defense.