agrowealthsavings[.]pro

This domain, agrowealthsavings.pro, is actively engaged in brand impersonation targeting base, a recognized financial or cryptocurrency platform. The site is designed to deceive users into entering sensitive credentials, including login details, personal identification, or financial information, by mimicking the legitimate base interface. The intent is to harvest data for unauthorized access, fraudulent transactions, or further exploitation in phishing campaigns. Given the domain's active status and targeted nature, the risk to users is classified as high, particularly for those interacting with base-related services. Analysis indicates agrowealthsavings.pro is flagged by 6 out of 95 security vendors on VirusTotal, suggesting moderate detection but persistent evasion of broader security measures. The domain was registered through Sav.com, LLC, and resolves to the IP address 163.61.188.222, hosted under AS153568 (NEW DHAKA HARDWARE) in the United States. Infrastructure analysis reveals the absence of an SSL certificate, increasing the likelihood of unencrypted data transmission and further exposing users to interception risks. The domain appears on at least one security blocklist, though its continued operation underscores gaps in real-time enforcement. Users who have visited agrowealthsavings.pro or entered credentials on the site should immediately revoke access to any associated accounts, particularly those linked to base. Reset passwords using a secure, unrelated device and enable multi-factor authentication where available. Monitor financial statements and account activity for unauthorized transactions, and report any suspicious behavior to the legitimate platform's security team. If personal or financial data was submitted, consider placing a fraud alert with relevant credit bureaus or financial institutions. Organizations should update internal blocklists to include this domain and its resolving IP to prevent further exposure.