baseshield[.]info

This domain, baseshield.info, is flagged as an active credential-harvesting phishing site impersonating the Base Wallet cryptocurrency platform. Analysis indicates the site employs brand impersonation tactics, presenting itself as the legitimate Base Wallet interface to deceive users into submitting sensitive credentials, including wallet recovery phrases and private keys. The page title explicitly mirrors the authentic service, displaying 'Base Wallet' to enhance credibility and increase the likelihood of successful compromise. Infrastructure analysis reveals the domain was registered on June 28, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with high-risk domains. The site resolves to the IP address 188.114.97.3, which has been observed in other low-reputation hosting environments. Detection metrics from VirusTotal indicate that 2 out of 95 security vendors have flagged the domain as malicious, while AlienVault OTX records its presence in one threat intelligence pulse. The SSL certificate is issued by Google Trust Services, providing a superficial layer of legitimacy that may mislead unsuspecting users. No entries were found in Google Safe Browsing at the time of analysis, though this does not preclude the domain from being blocked by other security layers. As of the latest assessment, baseshield.info remains operational, posing an ongoing risk to users of the Base platform. The domain's infrastructure and registration details suggest a deliberate effort to evade detection, while its active status indicates that no effective takedown has been executed. Users are advised to verify domain authenticity through official channels before interacting with any wallet-related services. Organizations should update blocklists to include this domain and its associated IP address, while security teams are encouraged to monitor for further indicators of compromise linked to this campaign.