blueoceancopymetrics[.]info

This domain, blueoceancopymetrics.info, carries an elevated risk level due to its confirmed brand impersonation phishing activity targeting the base brand. The domain is now offline, but its infrastructure and technical indicators strongly support a malicious classification. The threat type is specifically a brand impersonation phishing site designed to deceive users into believing they are interacting with legitimate base-related services, likely to harvest credentials, cryptocurrency, or sensitive data.

Analysis reveals multiple corroborating data points. VirusTotal flags the domain with 5 out of 95 security vendors marking it as malicious. The domain was registered through Cloudflare, Inc. and resolves to IP address 35.71.142.77. It appears on two security blocklists and has been blocked by ScamSniffer and PhishDestroy. The SSL certificate is issued by Google Trust Services. Gridinsoft assigns a trust score of 0 out of 100. The page title found was Blue Ocean Copy. Technologies detected include Framer Sites, YouTube, React, HSTS, Google Analytics, and HTTP/3. The site is currently taken offline, but the infrastructure remains a risk indicator.

Mitigation steps specific to brand impersonation phishing include: immediately avoid any interaction with the domain or its associated IP. Never enter credentials, financial information, or connect cryptocurrency wallets on such sites. Users should report the domain to relevant security blocklists and registry services. Organizations should monitor for similar domains using the same registration patterns or hosting infrastructure. Since the domain is offline, users who previously visited should scan their devices for malware and change any passwords used on the site. Enable multi-factor authentication on all accounts linked to the base platform.