capitalbaseassets[.]com

Analysis of capitalbaseassets.com shows an active infrastructure that aligns with a high‑risk brand‑impersonation campaign targeting the "base" brand. The domain was registered on 12 January 2025 through Dynadot LLC and is hosted on an IP address (198.12.66.123) owned by AS36352 HostPapa in the United States. It resolves to two authoritative nameservers (ns1.host-forest.com, ns2.host-forest.com) and presents a valid TLS certificate from Let’s Encrypt (E8). HTTP requests return a 200 status and the page title advertises "Capital base assets | Blockchain Investment Company," consistent with the declared crypto‑scam classification. Reputation services assign extremely low scores (Scamadviser 1/100, Gridinsoft 0/100) and VirusTotal reports a single vendor detection out of 95, while the domain appears on at least one security blocklist and is already blocked by PhishDestroy. The evidence points to a purposeful impersonation of the "base" brand to lure victims into a cryptocurrency‑related fraud. Uncertainty remains regarding the exact phishing page layout and any credential‑harvesting mechanisms, as no visual analysis is available. Defenders should block the domain at network perimeter, monitor DNS queries for the associated IP and nameservers, and flag any traffic to the site as malicious. Continuous re‑evaluation is advised to capture any changes in payload or hosting configuration.