fox[.]forenxikf[.]top

The domain fox.forenxikf.top is a confirmed phishing site engaged in brand impersonation targeting users of the Base cryptocurrency platform. It presents itself as a legitimate investment portal under the guise 'Fox Foreign Xikf Investment' but operates as a scam to deceive victims into disclosing sensitive information or transferring assets. No crypto drainer kit was identified, and the site is currently taken offline.

Technical indicators confirm the elevated risk posed by fox.forenxikf.top. As of analysis, 2 of 95 VirusTotal security vendors flagged the domain, including Netcraft. The domain was registered through NameCheap, Inc. on November 05, 2024, and resolves to the IP address 163.61.188.89, hosted on AS153568 NEW DHAKA HARDWARE in the US. It appears on one security blocklist (PhishDestroy) and lacks an SSL certificate. The observed page title was 'Unlock the Power of Your Crypto •Fox Foreign Xikf Investment', and the domain uses nameservers vip1.cupisweb.com and vip2.cupisweb.com. Google Safe Browsing has not flagged the domain, and Gridinsoft assigned a trust score of 0/100.

Users who interacted with fox.forenxikf.top should immediately change any credentials entered on the site, enable two-factor authentication on all accounts, and monitor for unauthorized transactions or fraudulent activity. If cryptocurrency was involved, revoke any token approvals granted to suspicious contracts and consider transferring funds to a new wallet. Report the phishing domain to the impersonated brand (Base), the registrar (NameCheap), and platforms like Google Safe Browsing or PhishTank to aid in takedown efforts.