userbase-3ks[.]pages[.]dev

The domain userbase-3ks.pages.dev is currently active and has been identified as a high-risk threat due to its engagement in brand impersonation. The domain impersonates the brand Base, which is known for its services and products in the technology sector. No specific drainer kit has been detected, but the domain's infrastructure and behavior suggest a sophisticated phishing campaign designed to deceive users into providing sensitive information.

Analysis indicates that userbase-3ks.pages.dev has been flagged by 3 out of 95 security vendors according to VirusTotal, a significant indicator of its malicious nature. The domain is registered through Cloudflare, Inc., and resolves to the IP address 172.66.47.138. The SSL certificate is issued by Google Trust Services / WE1, which may lend a false sense of security to unsuspecting users. The domain was created on September 02, 2020, and it currently appears on 3 security blocklists. Despite these warnings, the domain remains active and is not listed in the Google Safe Browsing database.

The current status of the domain is active, indicating ongoing potential for harm. Recommended response actions include blocking the domain at network and endpoint levels, and educating users about the risks associated with brand impersonation campaigns. The remaining risk is high, as the domain continues to operate and may be used to target individuals who are not aware of its malicious intent. Users are advised to verify the authenticity of any communications from Base through official channels and to avoid entering sensitive information on this or any unverified websites.