bafybeiaoni35loah6mxudvrxltj6qkb5afmoqjqbg2spapid2kltvnqvby[.]ipfs[.]dweb[.]link

The domain bafybeiaoni35loah6mxudvrxltj6qkb5afmoqjqbg2spapid2kltvnqvby.ipfs.dweb.link is under investigation for brand impersonation, specifically targeting the Base brand. The page title found was "NAVI," which may be part of a phishing lure. This threat is classified as a crypto drainer or fake login attempt, designed to steal credentials or assets from users who believe they are interacting with a legitimate Base service.

Technical indicators show that this domain has a VirusTotal score of 0 out of 95, meaning it has not yet been flagged by antivirus engines. It was registered through CSC Corporate Domains, Inc. and resolves to IP address 209.94.90.3. The domain was created on February 24, 2017, and has an SSL certificate from Let's Encrypt (E7). It appears on 2 security blocklists and is not listed on Google Safe Browsing. The domain is currently offline, which indicates that some action has been taken to mitigate the threat.

Despite being taken offline, the risk remains that similar domains may appear. Users should verify any communications claiming to be from Base through official channels. PhishDestroy recommends checking the PhishDestroy database for the latest threat intelligence. If you encounter this domain, do not enter any personal information or connect your wallet. Report any suspicious activity to the appropriate authorities.