base[.]aylorswift[.]com

The domain base.aylorswift.com has been identified as a brand impersonation threat, specifically targeting the Base brand. This domain does not utilize any known crypto drainer kits, but it impersonates the official Base brand, potentially misleading users into trusting a fraudulent site.

Infrastructure analysis reveals that base.aylorswift.com has a VirusTotal score of 6/95, indicating that it is flagged by a significant number of security vendors. The domain is registered through Dynadot LLC and resolves to the IP address 66.175.209.179. It was created on June 23, 2025, and incorporates technologies such as Nginx, OpenResty, and HSTS. The domain is currently listed on one security blocklist and has a Gridinsoft trust score of 0/100, reflecting a high level of suspicion and potential threat.

The domain is currently offline, which suggests that it has been taken down or is no longer active. However, the offline status does not eliminate the remaining risk, as the domain could be reactivated at any time. To mitigate this risk, it is recommended that users avoid visiting this domain and report any suspicious activity to their security providers. Organizations should also consider implementing additional security measures such as DNS filtering and user education on recognizing brand impersonation tactics.