espresso-fe[.]pages[.]dev

This domain, espresso-fe.pages.dev, operates as a high-risk brand impersonation site specifically targeting users of the Base blockchain platform. Analysis indicates the site mimics legitimate Base wallet interfaces, likely to harvest cryptocurrency credentials or distribute malicious payloads under the guise of official Base services. The page title 'opBase' further reinforces the attempt to deceive users into believing they are interacting with a legitimate Base-related application or portal.

Technical indicators confirm the malicious nature of this domain. As of the latest assessment, 2 out of 95 security vendors on VirusTotal have flagged espresso-fe.pages.dev as malicious. The domain was registered on December 17, 2025, through Cloudflare, Inc., and currently resolves to the IP address 188.114.97.3, hosted on AS13335 Cloudflare, Inc. infrastructure in the United States. The domain appears on 3 security blocklists, and no SSL certificate is present, increasing the risk of interception or tampering. Infrastructure analysis reveals the domain is still active and has not been taken down despite its detection by multiple security entities.

Users who have visited espresso-fe.pages.dev should immediately revoke any permissions granted to the site in their wallet applications. All credentials or recovery phrases entered on this domain should be considered compromised and must be changed without delay. It is recommended to scan the affected device for malware using updated security tools and monitor wallet transactions for unauthorized activity. If cryptocurrency was transferred to addresses provided by this site, report the incident to relevant blockchain analysis platforms and law enforcement agencies with transaction hashes and timestamps for further investigation.