fastship-express[.]com

This domain, fastship-express.com, is identified as a brand impersonation phishing site targeting Base, a cryptocurrency platform. Analysis indicates the infrastructure was designed to mimic legitimate logistics services, as evidenced by the page title 'Home - Fastship-Express,' suggesting an attempt to deceive users into believing they are interacting with a shipping or delivery service associated with Base. No specific drainer kit signatures were observed in available telemetry, but the domain’s thematic alignment with financial or transactional impersonation is notable given the targeted brand’s blockchain focus.

Technical indicators confirm elevated risk: the domain is flagged by 3 of 95 security vendors on VirusTotal, with a Gridinsoft trust score of 0/100 and a Scamadviser rating of 29/100. Registered on August 14, 2024, through Web Commerce Communications Limited, it resolved to the IP address 107.173.193.235 and employed a Let’s Encrypt SSL certificate. The domain appears on one security blocklist and was actively blocked by at least one threat intelligence feed prior to takedown. No detections were recorded in Google Safe Browsing at the time of analysis.

As of the latest assessment, fastship-express.com has been taken offline, reducing immediate exposure. However, residual risk persists due to the domain’s recent registration and the potential for infrastructure reuse or rebranding under similar naming conventions. Organizations are advised to monitor for recurring activity tied to the registrar or IP range, particularly those associated with cryptocurrency-related fraud. Users should verify domain authenticity through official Base channels and report any suspicious communications to relevant abuse contacts.