mao-stress[.]su

The domain mao-stress.su was identified as a phishing site engaged in brand impersonation, specifically targeting users of the cryptocurrency platform 'base'. This type of scam involves mimicking legitimate services to deceive victims into disclosing sensitive information or credentials. As of the latest verification, mao-stress.su has been taken offline, though its prior activity poses a risk to those who may have interacted with it.

Technical analysis of mao-stress.su reveals minimal detection at the time of investigation, with 0 of 95 VirusTotal vendors flagging the domain. It was registered through RUCENTER-SU on June 10, 2025, and resolved to the IPv6 address 2a12:bec4:10b5::1, hosted by AS213229 MITELIS SECURITY LIMITED in Great Britain. The domain appeared on a single security blocklist (PhishDestroy) and used an SSL certificate issued by Google Trust Services / WE1. Observed technologies included Cloudflare, Cloudflare Browser Insights, and HTTP/3, with a page title of 'Mao-Stress'. No drainer kit was associated with this campaign.

Individuals who visited mao-stress.su should take immediate steps to secure their accounts. If credentials were entered, change passwords for the impersonated service ('base') and enable two-factor authentication. Monitor accounts for unauthorized activity and report any suspicious transactions. To mitigate further risk, victims can report the domain to platforms like Google Safe Browsing, PhishTank, or their local cybersecurity authorities. Revoking token approvals or moving funds to a new wallet is unnecessary in this case, as no drainer kit was detected.