bluepointfinancialholdings[.]pro

This domain, bluepointfinancialholdings.pro, poses a significant credential harvesting threat by impersonating the Base brand. Users encountering this site may be tricked into submitting login credentials, financial details, or other sensitive information under the false pretense of interacting with a legitimate service. The domain was designed to closely mimic Base’s branding, including the use of a deceptive page title, bluepointfinancialholdings, to mislead visitors into believing they are accessing an authentic platform.

Analysis indicates that the domain was registered through Sav.com, LLC, and resolves to the IP address 163.61.188.5, hosted under AS153568 (NEW DHAKA HARDWARE) in the United States. Security vendors have flagged this domain as malicious, with 10 out of 95 engines on VirusTotal detecting it as a threat. Additionally, the domain appears on one security blocklist and lacks an SSL certificate, further increasing its risk profile. The absence of encryption and its presence on security blocklists suggest a deliberate attempt to evade detection while harvesting credentials.

If a user has visited bluepointfinancialholdings.pro or entered any information on the site, immediate action is required. First, all credentials submitted to the site should be considered compromised and must be changed across any other platforms where they were reused. Users should also monitor their accounts for unauthorized transactions or suspicious activity. Enabling multi-factor authentication (MFA) on all critical accounts can provide an additional layer of security. Finally, reporting the domain to relevant security teams or incident response platforms can help prevent further exploitation by this campaign.