kasmixer[.]com

Analysis of the domain kasmixer.com confirms its classification as a brand impersonation scam targeting Base, a cryptocurrency platform. The domain was registered on May 28, 2025, through HOSTINGER operations, UAB, and currently resolves to the IP address 66.94.120.76, hosted by Contabo Inc. (AS40021) in the United States. Infrastructure analysis reveals the use of Cloudflare nameservers (bowen.ns.cloudflare.com and kristina.ns.cloudflare.com), a common tactic to obscure hosting origins and evade detection. The page title, 'Kaspafunding,' does not directly reference Base but suggests an attempt to mimic financial or funding-related services, aligning with the scam type identified as brand impersonation. Detection data indicates limited but actionable intelligence: two of 95 security vendors on VirusTotal flagged the domain as malicious at the time of assessment.

Additionally, the domain appears on one security blocklist and is blocked by PhishDestroy. Gridinsoft assigns a trust score of 0/100, further corroborating its malicious classification. Notably, the domain lacks an SSL certificate, increasing the likelihood of interception or tampering during user interactions. As of July 24, 2026, kasmixer.com has been taken offline, though defenders should remain vigilant for potential re-emergence under similar infrastructure or registration patterns. The absence of additional details regarding the phishing kit, specific lures, or user interaction flows limits further technical attribution.

However, the combination of brand impersonation, Cloudflare obfuscation, and low detection counts suggests a targeted or low-volume campaign designed to evade automated defenses. Defenders are advised to monitor for domains registered through HOSTINGER operations, UAB, resolving to Contabo Inc. infrastructure, or utilizing Cloudflare nameservers with similarly low initial detection rates. Blocklisting the domain and its associated IP (66.94.120.