baseinet-mx[.]xyz

This domain is flagged for elevated-risk brand impersonation targeting Base, a cryptocurrency platform. Analysis indicates the site masquerades as a legitimate jewelry retailer (Oro Imperial) to deceive users into engaging with fraudulent content, likely leveraging Base's brand recognition to facilitate scams or credential harvesting. The infrastructure and page content do not align with Base's official services, confirming malicious intent. Infrastructure analysis reveals the domain baseinet-mx.xyz was registered on February 21, 2026, through NiceNIC International Group Co., Limited. It resolves to the IP address 146.190.143.71 and is currently offline. The domain appears on one security blocklist and is flagged by 5 out of 95 security vendors on VirusTotal. Additional indicators include a Gridinsoft trust score of 0/100 and detected technologies such as React, LiteSpeed, Google Analytics, and HTTP/3. The page title, 'Oro Imperial - La Joyería de Oro Más Fina de México | Mejores Precios y Oro Puro,' further confirms the site's fraudulent nature, as it bears no relation to Base's cryptocurrency services. Mitigation steps for this brand impersonation threat include immediate blocking of the domain and its associated IP (146.190.143.71) at the network perimeter. Security teams should update endpoint protection rules to flag any attempts to access this domain or related infrastructure. Organizations should also monitor for similar domains registered through NiceNIC International Group Co., Limited, particularly those created around the same date (February 2026) or resolving to the same IP range. User awareness training should emphasize verifying domain authenticity before interacting with cryptocurrency-related sites, especially those impersonating trusted brands like Base. Additionally, security teams are advised to review logs for any prior connections to this domain to assess potential exposure.