wweb-baseiinetmx[.]one

Analysis of the domain wweb-baseiinetmx.one shows it was registered on February 21 2026 and is associated with a crypto‑related brand‑impersonation campaign targeting the Base brand, as indicated by the page title “Base Banco” and the declared impersonation of “base”. The domain resolves to the IPv4 address 209.127.184.165, which is assigned to AS55286 (B2 Net Solutions Inc.) in the United States. Reputation checks reveal a Gridinsoft trust score of 0 / 100 and inclusion on a single security blocklist; the domain is also listed by PhishDestroy as blocked. VirusTotal scans report that 12 of 93 antivirus and URL‑reputation engines flagged the domain, confirming a notable detection rate.

The TLS certificate presented by the site is a self‑signed “localhost” certificate, a common indicator of malicious infrastructure. The site’s HTTP service is currently offline, and the domain has been taken down, but the observed indicators remain relevant for threat‑intel correlation. Uncertainty remains regarding the full scope of the campaign, such as the number of additional landing pages, the specific cryptocurrency mechanisms employed, and whether the IP address hosts other malicious domains.

No further forensic detail about the page content is available beyond the title. Defenders should immediately add wweb-baseiinetmx.one and its resolved IP 209.127.184.165 to blocklists, enforce DNS‑sinkholing, and monitor for any resurgence of the domain or related hostnames. Continuous review of the blocklist that listed the domain and periodic re‑scans with multi‑engine services are advised to capture any changes in the threat posture.