iiweb-baseiinetmx[.]click

The domain iiweb-baseiinetmx.click impersonates the brand Base in a crypto scam operation. Despite being taken down, it has already been flagged by 16 out of 93 vendors on VirusTotal and appears on three public blocklists, including those maintained by PhishDestroy, MetaMask, and SEAL. Google Safe Browsing also flags this domain as malicious, indicating a broad recognition of its threat potential.

Registered through Dynadot LLC and hosted on an Amazon IP in the US, iiweb-baseiinetmx.click was created on December 15, 2025, and detected by PhishDestroy on December 22, 2025. The site's rapid detection and takedown highlight the effectiveness of early threat identification systems. However, the brief window of operation underscores the challenges in combating phishing domains that exploit the initial lag in antivirus database updates.

The lack of an SSL certificate further suggests a hastily constructed scam site, typical of phishing operations targeting cryptocurrency users. By impersonating a legitimate brand, the attackers aim to deceive users into divulging sensitive information or transferring funds. The swift response by security entities and the inclusion of this domain in multiple blocklists demonstrate coordinated efforts to mitigate the risk posed by such scams. Nonetheless, the incident serves as a reminder of the ongoing need for vigilance in the digital landscape.