idexbase[.]com

This domain is flagged as a high-risk brand impersonation threat specifically targeting Base, a well-known cryptocurrency platform. Analysis indicates the site was designed to deceive users into believing it is an official or affiliated exchange, likely for credential harvesting or fraudulent transactions. The page title 'IDEX-CRYPTO' further suggests an attempt to mimic established crypto trading platforms, increasing the likelihood of successful social engineering attacks. Infrastructure analysis reveals the domain was registered on July 6, 2025, through Gname.com Pte. Ltd. It resolves to IP address 188.114.97.3, hosted on Cloudflare’s network (AS13335). The SSL certificate is issued by Google Trust Services (WE1), a common tactic to appear legitimate. Detection metrics show 13 out of 95 security vendors on VirusTotal flagged the domain as malicious. Additional indicators include a Google Safe Browsing phishing flag, presence on one security blocklist, and a block by PhishDestroy. The domain is currently offline, but its infrastructure remains a potential residual risk. Mitigation steps for this threat type include blocking the domain and associated IP at the network perimeter. Security teams should monitor for residual DNS queries or attempts to re-establish the domain. End-users should be educated on verifying official Base domains and enabling multi-factor authentication on all crypto-related accounts. Organizations should also review logs for any prior connections to idexbase.com or its IP to assess potential exposure. If credentials were entered on this site, immediate password resets and account reviews are recommended for affected users.