og-base[.]org

The domain og-base.org is currently flagged as an active brand impersonation threat specifically targeting Base, an open-source blockchain platform. This domain is designed to deceive users by mimicking the legitimate Base protocol, potentially facilitating fraudulent activities such as crypto asset theft or credential harvesting. Analysis confirms the domain remains operational and poses a high risk to individuals interacting with decentralized finance (DeFi) or blockchain services. Infrastructure analysis reveals og-base.org is registered through PDR Ltd. d/b/a PublicDomainRegistry.com, with a creation date of May 12, 2026, indicating a suspiciously forward-dated registration. The domain resolves to the IP address 104.21.66.195 and is flagged by 14 of 95 security vendors on VirusTotal. Additional technical indicators include a Gridinsoft trust score of 0/100 and detection on four security blocklists, including MetaMask, PhishDestroy, SEAL, and ScamSniffer. The site employs PHP, Cloudflare, and HTTP/3, which are commonly observed in both legitimate and malicious infrastructures, though the combination of these factors strongly suggests fraudulent intent. Current status confirms og-base.org remains active, with no evidence of takedown or mitigation. Users are advised to treat this domain as hostile and avoid interaction. Network administrators should implement blocklist updates to prevent access, while security teams should monitor for related indicators of compromise, including the IP address 104.21.66.195 and associated domain infrastructure. Verification of blockchain transactions or communications referencing this domain should be conducted with heightened scrutiny, as interactions may lead to financial loss or unauthorized access to sensitive credentials.