wweb-baseiinetmx[.]icu

Analysis indicates that the domain wweb-baseiinetmx.icu was registered on 21 February 2026 and subsequently hosted on the IP address 209.127.184.165, which belongs to AS55286 B2 Net Solutions Inc. in the United States. The site presented the page title “Base Banco” and was classified as a crypto‑scam that impersonates the brand “base”. The SSL certificate presented as “localhost”, which is typical for fraudulent infrastructure and does not provide a valid chain of trust. VirusTotal recorded 16 detections out of 93 scanners, confirming that multiple security vendors consider the domain malicious. It appears on at least one external blocklist and is listed by PhishDestroy, indicating that community‑driven feeds have already flagged it.

The domain is currently offline, which may be a temporary takedown or a shift to a new hosting location. Uncertainty remains regarding the exact content served before takedown, as no visual or HTML analysis is available in the provided intelligence. The specific phishing kit or exploit vectors have not been disclosed, and the short lifespan of the domain suggests a possible fast‑flux or throwaway operation. Defenders should continue to monitor the IP address 209.127.184.165 for any re‑appearance of malicious activity and ensure that outbound traffic to this address is blocked at the network perimeter.

Updating URL filtering and DNS threat feeds with the domain and its associated IP will help prevent accidental connections. Organizations that reference the “base” brand should alert users to the existence of a fraudulent “Base Banco” page and reinforce verification procedures for cryptocurrency‑related communications. Because the site is already listed on multiple blocklists, security tooling that ingests those feeds will likely already be blocking it, but manual verification of firewall and proxy rules is recommended to confirm coverage.