dexetfassets[.]com

Analysis of dexetfassets.com shows that the domain was registered on 21 February 2026 through Host Africa (Pty.) Ltd. The authoritative WHOIS record lists the registrar but does not disclose additional contact details. DNS resolution points to the IPv4 address 213.165.249.109, which is advertised as belonging to AS22611 InMotion Hosting, Inc. and geolocated to the Netherlands. The hosting provider is a common infrastructure used by malicious operators, and the same address appears in other threat reports. The site’s TLS certificate carries an R10 rating, indicating a low‑trust certificate that is likely self‑signed or otherwise untrusted. Gridinsoft’s trust scoring system assigns a score of 0 out of 100, confirming the lack of reputation for the host. The page title returned by the HTTP response is "Dexetfassets - Crypto trading with a reliable broker." This title, combined with the declared scam type "Crypto Scam," suggests that the domain is being used to lure victims into a cryptocurrency investment fraud.

The intelligence also notes an impersonation of the brand "base," implying that the attacker may be leveraging the brand name to increase credibility. Detection data shows that the domain appears on a single security blocklist and was flagged by one of ninety‑three VirusTotal scanners. PhishDestroy has also listed the domain as blocked. No additional public blocklists or Safe Browsing entries are reported. The domain is currently offline, which may indicate that the operators have taken the site down after initial distribution or are preparing a new deployment.

Uncertainty remains around the exact phishing page content, the presence of credential‑stealing forms, and whether any malware payloads were delivered. No evidence of additional infrastructure such as command‑and‑control servers or associated domains is available in the current dataset. Defenders should add the IPv4 address 213.165.249.