chainbase-b9a[.]pages[.]dev

Analysis of the domain chainbase-b9a.pages.dev indicates it is an active phishing infrastructure impersonating Chainbase, a data network platform. The domain was registered on April 21, 2026, and is currently resolving to the IP address 188.114.96.3, hosted under Cloudflare, Inc. in Canada. The page title, 'Chainbase Genesis: Your Gateway to the World's Largest Omnichain Data Network,' explicitly matches the branding of the legitimate Chainbase service, confirming the intent of brand impersonation as classified in available threat intelligence. Infrastructure review reveals the use of Cloudflare nameservers (buck.ns.cloudflare.com and paislee.ns.cloudflare.com) and an SSL certificate issued by Google Trust Services (WE1). The domain is served over HTTP/3 and employs HSTS, Google Analytics, and Cloudflare technologies, which are consistent with both legitimate and malicious deployments. The HTTP status code 200 suggests the page is accessible, and the domain remains active as of July 12, 2026. It appears on two security blocklists and is flagged by at least one vendor on VirusTotal, though the specific detection context is not detailed. Defenders should treat this domain as high-risk due to its confirmed brand impersonation, active status, and inclusion on multiple blocklists. The exact content and functionality of the site have not been analyzed, so further investigation is required to determine if it hosts credential harvesting, malware distribution, or other malicious payloads. Network-level blocking and monitoring of associated IP addresses and nameservers are recommended to mitigate potential exposure.