user[.]baseroomhub[.]net

The domain user.baseroomhub.net was registered on January 12, 2026 and currently resolves to the Cloudflare IP address 188.114.96.3, which is geolocated to Canada. The authoritative name servers are lex.ns.cloudflare.com and sharon.ns.cloudflare.com, and the site presents a valid SSL certificate issued by Google Trust Services under the WE1 root. HTTP requests return a 200 status code, indicating that the web service is operational. Threat intelligence classifies the site as a generic phishing campaign employing brand impersonation, although the specific target brand is not disclosed beyond the page title "Base Room Hub". VirusTotal analysis shows that 3 of 91 security vendors have flagged the domain, and Gridinsoft assigns a trust score of 0 out of 100, reflecting a high likelihood of malicious intent. The domain is listed on three security blocklists and is actively blocked by multiple network filtering solutions. Risk is rated high and the activity remains active. Defenders should add the domain to deny lists at DNS and proxy layers, monitor outbound connections to the associated IP, and enforce TLS inspection to verify the certificate chain. Continuous re‑evaluation is advised, as content behind the site has not been publicly analysed; any change in page behavior should trigger an immediate investigation.