vpostelerc[.]firebaseapp[.]com

This domain, vpostelerc.firebaseapp.com, is identified as an active brand impersonation threat specifically targeting Base, a cryptocurrency platform. The domain is currently operational and designed to deceive users into believing they are interacting with legitimate Base services, potentially leading to credential theft or financial fraud. Analysis indicates the domain was registered through Google LLC on April 15, 2026, and resolves to the IP address 199.36.158.100, hosted within Google LLC infrastructure in the United States. It appears on one security blocklist and is flagged by 10 of 95 security vendors on VirusTotal. The SSL certificate is issued by Google Trust Services (WR4), and the page title, postleds.chansolusn.buzz, suggests an attempt to obfuscate its true purpose. The domain remains unmitigated and continues to pose a high-risk threat to users. Current infrastructure analysis reveals the domain remains active and unblocked by most security mechanisms. Users and organizations are advised to implement immediate network-level blocking of vpostelerc.firebaseapp.com and its associated IP address, 199.36.158.100. Cryptocurrency platforms and wallet providers should monitor for user reports of phishing attempts linked to this domain and update endpoint protection rules to include this indicator of compromise. Verification of all communications claiming to originate from Base is strongly recommended.