eryxavin-it[.]net

This domain, eryxavin-it.net, poses a high-risk brand impersonation threat targeting Base, a blockchain platform. The site masquerades as an official Italian trading platform under the name 'Eryxavin - Piattaforma Ufficiale Italia | Trading IA 2026,' attempting to deceive users into engaging with fraudulent financial or cryptocurrency services. Analysis indicates the domain is designed to exploit trust in the Base brand, likely to harvest credentials, distribute malware, or facilitate unauthorized transactions under the guise of AI-driven trading services. Infrastructure analysis reveals eryxavin-it.net was registered on February 21, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com. The domain resolves to IP address 188.114.97.3, hosted on Cloudflare infrastructure (AS13335), a common tactic to obscure malicious activity behind legitimate CDN services. The domain lacks an SSL certificate, increasing the risk of interception or manipulation of user data. It appears on three security blocklists and is flagged by Google Safe Browsing as phishing. VirusTotal reports 17 out of 95 security vendors detecting the domain as malicious, confirming its classification as high-risk infrastructure. Users who visited eryxavin-it.net should immediately cease all interaction with the domain. If credentials or financial information were entered, affected parties should revoke access to any associated accounts, enable multi-factor authentication, and monitor for unauthorized transactions. Devices used to access the site should undergo a full security scan to detect potential malware or backdoors. Given the domain's offline status, users should remain vigilant for similar impersonation attempts targeting Base or other blockchain platforms, particularly those leveraging AI or trading-related themes to appear legitimate.