coin-faqs--page-base[.]pages[.]dev

This domain, coin-faqs--page-base.pages.dev, poses as an official Base cryptocurrency resource to deceive users into disclosing wallet credentials or approving malicious transactions. Brand impersonation of this nature typically involves fake login portals, fraudulent airdrop claims, or crypto drainer scripts that automatically siphon funds from connected wallets. The site’s infrastructure mimics legitimate Base support pages, increasing the likelihood of successful social engineering attacks against users seeking assistance or investment opportunities. Analysis indicates the domain was registered on October 6, 2025, through Cloudflare, Inc., and is currently offline with a page title reading 'Suspected phishing site | Cloudflare.' Security vendors on VirusTotal flagged the domain at a ratio of 11 out of 95, a significant detection rate for a newly created site. The domain resolves to Cloudflare’s IPv6 address 2a06:98c1:3120::3, and its SSL certificate is issued by Google Trust Services, which is consistent with legitimate services but frequently abused by threat actors to appear trustworthy. Users who visited coin-faqs--page-base.pages.dev should assume their wallet credentials or transaction approvals may have been compromised. Immediately revoke any connected dApp permissions using a blockchain explorer or wallet management tool. Scan the device used to access the site for malware, as some crypto drainers install persistent backdoors. Monitor all linked wallets for unauthorized transactions and report the incident to the impersonated brand’s official security channels. Avoid interacting with any communications or links associated with this domain, as follow-up attacks may occur.