checkout[.]fiotedesorteoficial[.]com

The domain checkout.fiotedesorteoficial.com is currently active and poses a high-risk threat of brand impersonation, specifically targeting the Base brand. No drainer kit has been identified, but the site appears to be designed to deceive users into believing they are interacting with a legitimate Base service.

Infrastructure analysis reveals that the domain is registered through NicNames, Inc. and resolves to the IP address 80.78.25.86, which is located in Denmark and is part of the AS39287 Materialism s.r.l. network. The domain was created on August 14, 2025. VirusTotal reports a flag from 1 out of 95 security vendors, and the domain appears on 1 security blocklist. No SSL certificate is present, further indicating potential security risks.

The current status of the domain is active, and it is blocked by PhishDestroy. However, the low VT score and the presence on a single blocklist suggest that this domain may not be widely known or recognized as malicious yet. Actionable safety guidance includes avoiding interactions with the domain, reporting it to additional security services, and monitoring for any further signs of suspicious activity to mitigate the remaining risk.