www2[.]7yw95el[.]eu[.]org

This domain, www2.7yw95el.eu.org, is actively engaged in brand impersonation targeting the Base cryptocurrency platform, leveraging misleading branding associated with CCTV (China Central Television). Analysis indicates the domain was registered on August 9, 1995, through Gandi SAS, though this unusually early creation date may reflect domain repurposing rather than original intent. The site resolves to IP 188.114.97.3, hosted on AS13335 (Cloudflare, Inc.) in the United States, and returns an HTTP 200 status, confirming operational status as of July 12, 2026. The page title, "海外频道_央视网(cctv.com)", suggests an attempt to mimic CCTV’s overseas channel, though the exact content and technical implementation remain unconfirmed beyond this metadata. Security vendor detection is limited but notable: 16 of 95 engines on VirusTotal flag the domain, and it appears on one security blocklist, with PhishDestroy explicitly blocking it. The domain’s SSL certificate is issued by Google Trust Services (WE1), a common but not inherently malicious provider. Infrastructure analysis reveals three nameservers: ns1.eu.org, ns.bortzmeyer.eu.org, and hobbes.bsd-dk.dk, which may indicate a broader malicious or compromised DNS infrastructure. Gridinsoft assigns a trust score of 0/100, reinforcing its high-risk classification. While the domain is explicitly labeled as a crypto scam, no further details about the attack vector (e.g., fake wallets, token giveaways, or drainer scripts) are available. Defenders should treat this domain as high-risk, particularly for users interacting with Base or other cryptocurrency platforms. Immediate blocking at the DNS or proxy level is recommended, alongside monitoring for related domains using the same nameserver infrastructure or Cloudflare-hosted IPs. Further analysis of the site’s content and backend scripts is necessary to determine the full scope of the scam.