bepchain[.]work

This domain, bepchain.work, is currently flagged as an active instance of brand impersonation targeting Base, a well-known cryptocurrency platform. The site presents itself under the page title 'TRANSFER USDT,' a clear indicator of fraudulent intent to deceive users into transferring cryptocurrency assets under false pretenses. Analysis confirms the domain is operational and designed to mimic legitimate Base services, posing a significant risk to unsuspecting users. Infrastructure analysis reveals the domain was registered on April 13, 2026, through GoDaddy.com, LLC, a widely used registrar. It resolves to the IP address 77.245.76.110, hosted under AS20860 (IOMART CLOUD SERVICES LIMITED) in the United Kingdom. VirusTotal reports that 1 of 95 security vendors has flagged the domain as malicious, while it appears on one security blocklist. The SSL certificate is issued by Let's Encrypt (R13), a common choice for both legitimate and malicious sites. The creation date discrepancy (2026) suggests potential domain spoofing or an error in registration data, further raising suspicion. Current status indicates the domain remains active and unmitigated, continuing to pose a high risk to users. The combination of brand impersonation, cryptocurrency-themed deception, and minimal detection by security vendors underscores the need for immediate action. Organizations and individuals are advised to block the domain and associated IP address at the network level. Users should be alerted to the threat, particularly those interacting with Base or cryptocurrency platforms. Monitoring for similar domains registered via the same infrastructure or exhibiting comparable page titles is recommended to preempt further fraudulent activity.