iberix-es[.]com

Analysis of the domain iberix-es.com indicates a confirmed brand impersonation campaign targeting users of the Base platform, as documented on July 24, 2026. The domain was registered on February 21, 2026, through Metaregistrar BV and is currently offline following detection. Infrastructure analysis reveals the domain resolved to the IP address 104.21.19.124, hosted on Cloudflare's network (AS13335) in the United States, with nameservers harvey.ns.cloudflare.com and laylah.ns.cloudflare.com. No SSL certificate was present at the time of assessment, increasing the likelihood of interception risks for visitors.

The page title, 'IberiX - Plataforma Oficial | Trading IA 2025 | Más de 10.000 Reseñas,' explicitly claims affiliation with an official trading platform, leveraging social proof tactics to deceive users. While the domain is categorized as a brand impersonation scam, the exact content and functionality of the site remain unconfirmed due to its offline status. Detection metrics show limited but actionable coverage: two of ninety-three security vendors on VirusTotal flagged the domain, and it appears on one security blocklist, specifically PhishDestroy. Gridinsoft assigned a trust score of 0/100, further corroborating its malicious classification.

Defenders are advised to treat this domain as high-risk for Base-related phishing activity. Network-level blocking of the IP 104.21.19.124 and the domain itself is recommended, alongside monitoring for related Cloudflare-hosted infrastructure. Given the domain's offline status, no immediate user interaction is expected, but historical logs should be reviewed for prior access attempts. The absence of SSL and reliance on a well-known CDN provider align with common phishing infrastructure patterns, though attribution to a specific threat actor or campaign remains unconfirmed.