sorewin149[.]pro

The domain sorewin149.pro is identified as a brand impersonation threat targeting Base, a prominent blockchain platform. Analysis indicates the domain masquerades as a cryptocurrency casino, leveraging the Base brand to deceive users into engaging with fraudulent services. Currently, the domain is offline, but prior activity suggests it was operational for malicious purposes. Infrastructure analysis reveals the domain was registered on April 28, 2026, through Fewmoretaps OU, operating under the trade name Trustname.com. It resolves to the IP address 66.198.225.39, associated with hosting provider SKN & Telecom Ltd in the United States. The domain appears on one security blocklist and is flagged by 19 of 95 security vendors on VirusTotal, indicating elevated detection rates. The SSL certificate is issued by Let's Encrypt (serial number E7), a common but not inherently trustworthy issuer in malicious contexts. The current offline status of sorewin149.pro does not eliminate the risk, as domains of this nature often resurface under altered infrastructure. Users are advised to exercise caution and verify the legitimacy of any platform claiming affiliation with Base or cryptocurrency services. Organizations should monitor for similar impersonation attempts, particularly those leveraging blockchain or crypto-related themes. Blocking the domain and associated IP at the network level is recommended to prevent potential exposure. Additionally, users should report such domains to relevant security communities to aid in broader threat mitigation efforts.