privypets[.]app

Analysis indicates that privypets.app is an active brand-impersonation domain targeting Base, a blockchain platform. The domain was registered on June 20, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, and currently resolves to IP address 216.198.79.1. The page title, 'PrivyPets — Pixel pets on Base,' explicitly associates the site with Base, suggesting an attempt to deceive users into engaging with a fraudulent blockchain-based game or asset scheme. Security vendors have flagged the domain, with 6 out of 95 detecting it as malicious. It appears on 4 security blocklists and has been included in 14 threat intelligence pulses on AlienVault OTX, reinforcing its classification as high-risk. The domain is actively blocked by multiple security mechanisms, including SEAL, MetaMask, PhishDestroy, and BLP-Malware. Infrastructure analysis reveals the use of Vercel hosting and HSTS, alongside a Let's Encrypt SSL certificate, which is commonly observed in both legitimate and malicious sites. Defenders should treat this domain as confirmed malicious due to its brand impersonation, active status, and detection by multiple security sources. Immediate blocking at the network and endpoint levels is recommended, along with monitoring for related domains registered through the same registrar or resolving to the same IP. The exact nature of the scam—whether it involves crypto asset theft, credential harvesting, or another attack vector—remains unconfirmed, as the site content has not been fully analyzed. Further investigation into associated infrastructure and threat actor patterns is advised.