official-baseswap-us[.]pages[.]dev

The domain official-baseswap-us.pages.dev has been identified as a brand impersonation threat specifically targeting the Base blockchain ecosystem by masquerading as the legitimate BaseSwap DeFi platform. The site is currently offline, but during its active period it presented itself as "BaseSwap | The Future of DeFi Trading on the Base Network" to lure crypto users into connecting their wallets or entering sensitive information. This domain was created on April 06, 2026, and resolved to IP address 172.66.46.243, registered through Cloudflare, Inc. with an SSL certificate issued by Google Trust Services (WE1).

Technical analysis reveals that this domain is flagged by 1 out of 95 VirusTotal security vendors, indicating limited but credible detection, and it appears on 3 security blocklists. The low vendor flag count suggests the domain was relatively new or had not yet been widely reported, but the presence on multiple blocklists confirms malicious intent. The use of Cloudflare as registrar is common among phishing operations seeking to obscure true hosting details. The domain's creation date and rapid takedown further support the conclusion that this was a short-lived phishing campaign.

Given that the site is now offline, the immediate risk is mitigated, but users should remain vigilant. PhishDestroy recommends that anyone who visited official-baseswap-us.pages.dev or entered credentials should immediately revoke any permissions granted and change passwords for associated accounts. Always verify URLs against official sources before interacting with DeFi platforms, and use PhishDestroy's tools to check domain legitimacy. This incident underscores the importance of double-checking domain names, as phishing sites often use slight variations of legitimate brands.