secure-docs-page-basepro[.]pages[.]dev

This domain, secure-docs-page-basepro.pages.dev, is flagged as a high-risk phishing resource specializing in brand impersonation targeting Base, a recognized cryptocurrency platform. Analysis indicates the site was designed to deceive users into disclosing sensitive credentials or transferring assets under false pretenses. No explicit drainer kit signatures were identified in initial scans, though the infrastructure aligns with common phishing deployment patterns observed in cryptocurrency fraud campaigns. Infrastructure analysis reveals the domain was registered through Cloudflare, Inc. on September 02, 2020, and resolves to the IP address 172.66.44.128, hosted on autonomous system AS13335. Security vendor detections on VirusTotal reached 15 out of 95 engines, indicating moderate consensus on malicious classification. Google Safe Browsing explicitly flags the domain as phishing, and it appears on one security blocklist. The SSL certificate is issued by Google Trust Services, serial number WE1, which does not inherently validate legitimacy due to widespread abuse of free certificate authorities in phishing operations. As of the latest assessment, secure-docs-page-basepro.pages.dev has been taken offline, likely following automated or manual takedown procedures. The domain's page title was replaced with a generic warning label, suggesting intervention by the hosting provider. Despite its offline status, residual risk persists due to potential re-activation under altered infrastructure or domain variations. Users and organizations are advised to monitor for similar impersonation attempts, particularly those leveraging Cloudflare Pages subdomains, and to verify all communications through official Base channels before engaging with cryptocurrency-related requests.