jweb-baseiinetmx[.]onl

This report analyzes the domain jweb-baseiinetmx.onl, which is an impersonation scam targeting the brand Base. The site's page title matches the domain name, and its purpose is to deceive users into believing it is affiliated with Base, likely to steal credentials or sensitive information. The threat involves phishing or credential harvesting by mimicking a legitimate service.

Technical analysis reveals that the domain was flagged by 17 out of 95 VirusTotal vendors. It was created on 2026-02-21 and hosted on IP address 199.59.243.228, located in the United States and associated with AS16509 Amazon.com, Inc. The site uses SSL certificate R13 and has been flagged by ChainPatrol, alphaMountain.ai, BitDefender, CRDF, and CyRadar. It is listed on 3 blocklists. The GridinSoft trust score is 0 out of 100, and the DOM risk score is 73.

The domain is currently DOWN or OFFLINE, reducing immediate threat but indicating previous malicious activity. The risk level is high based on the low trust score, high DOM risk score, and multiple security vendor detections. Users should avoid any interaction with this domain or similar impersonation attempts.