elevatrex[.]com

The domain elevatrex.com was a phishing site engaged in brand impersonation targeting users of the cryptocurrency platform base. It posed an elevated risk as a cryptocurrency scam, designed to deceive victims into interacting with fraudulent content. No drainer kit was identified, and the site is currently taken offline, though it previously impersonated base to facilitate phishing attacks.

Technical indicators confirm elevatrex.com was flagged by 1 of 95 VirusTotal security vendors, including Netcraft, and appeared on 1 security blocklist (PhishDestroy). The domain was registered through Atak Domain on March 27, 2025, and resolved to the IP address 86.107.77.165, hosted in Germany under AS216395 (HostBet Cloud Technologies Private Limited). Its SSL certificate was issued by Let's Encrypt (R12), and the observed page title was 'elevatrex.com'. MX records pointed to the domain itself, and nameservers were ns1.hostmane.net and ns2.hostmane.net. Trust scores from Gridinsoft and Scamadviser were 0/100 and 1/100, respectively, further indicating its malicious nature.

Victims of elevatrex.com should immediately revoke any token approvals granted to suspicious contracts and transfer remaining funds to a new cryptocurrency wallet. If login credentials were entered, change passwords for the impersonated platform (base) and enable two-factor authentication. Monitor accounts for unauthorized transactions and report the phishing domain to relevant authorities, including the impersonated brand's security team and platforms like Google Safe Browsing or PhishTank to aid in takedown efforts.