base-mixer[.]com

This domain, base-mixer.com, operates as a crypto-draining phishing platform specifically targeting users of the BASE blockchain ecosystem. The site presents itself as a cryptocurrency mixer service, claiming to anonymize assets including Ethereum, USDC, DAI, cbBTC, USDe, and ENA. Analysis indicates the platform is designed to trick victims into connecting their wallets to malicious smart contracts, which subsequently drain funds through unauthorized transactions. The fraudulent service exploits the growing popularity of BASE and its associated tokens to maximize victim engagement through deceptive promises of privacy and anonymity. Infrastructure analysis reveals multiple indicators of malicious intent. The domain was registered on July 30, 2025, through NiceNIC International Group Co., Limited, a registrar frequently associated with high-risk domains. It resolves to the IP address 188.114.97.3 and is flagged by 14 out of 95 security vendors on VirusTotal, with detection labels including 'phishing' and 'malicious site.' The domain appears on one security blocklist and has been assigned a trust score of 0/100 by Gridinsoft. Technical indicators further include the use of Nginx as the web server and implementation of HSTS, alongside a Let's Encrypt SSL certificate, which collectively attempt to create a veneer of legitimacy. Users who visited base-mixer.com should immediately disconnect any connected wallets and revoke all smart contract authorizations associated with the domain. All cryptocurrency assets should be transferred to new, secure wallets, and transaction histories should be reviewed for unauthorized activity. It is recommended to monitor accounts for signs of compromise and report the incident to relevant blockchain security teams. Given the domain's current offline status, users should remain vigilant for similar phishing attempts targeting BASE or other blockchain services, particularly those offering mixing or anonymization services.