tor-base[.]com

This domain is flagged as a high-risk brand impersonation threat targeting Base, a cryptocurrency platform. The site presents itself as a darknet intelligence portal, a tactic commonly used to lure users into disclosing sensitive credentials or installing malicious payloads under the guise of exclusive access or security updates. Analysis indicates the domain is designed to exploit trust in the Base brand, potentially leading to financial fraud or account compromise. Infrastructure analysis reveals the domain was registered on September 04, 2025, through TUCOWS.COM, CO. It resolves to the IP address 176.116.0.112, located in the Netherlands and associated with Alexhost SRL, a hosting provider frequently linked to malicious activity. The domain is currently active and has been flagged by 3 out of 95 security vendors on VirusTotal, appearing on one security blocklist. It is blocked by PhishDestroy and uses a Let's Encrypt SSL certificate (R13), which, while providing encryption, does not validate the legitimacy of the site. The page title, 'TOR-BASE.COM - Darknet Markets Intelligence Portal,' further suggests an attempt to deceive users into believing the site offers illicit market intelligence or tools. Mitigation steps for this threat include immediate blocking of the domain and its associated IP address (176.116.0.112) at the network perimeter. Organizations should update endpoint protection rules to detect and prevent access to this domain, particularly for users interacting with cryptocurrency platforms. Security teams are advised to monitor for credential theft attempts or unauthorized transactions originating from systems that accessed this site. Users who may have interacted with the domain should be instructed to reset their credentials for Base and any other accounts where passwords may have been reused. Additionally, security awareness training should emphasize the risks of darknet-themed phishing sites and the importance of verifying domain authenticity before entering sensitive information.