walletbase[.]app

This domain, walletbase.app, is flagged as a brand impersonation threat targeting Base, a well-known cryptocurrency platform. Analysis indicates the site mimics legitimate wallet services to deceive users into divulging sensitive credentials or transferring assets. The infrastructure does not currently exhibit direct indicators of a crypto drainer kit, but the impersonation framework aligns with known phishing tactics designed to harvest login details or private keys. The domain’s design and functionality likely replicate Base’s official interface, increasing the risk of user deception through social engineering techniques. Infrastructure analysis reveals the following technical indicators: the domain was registered on June 08, 2026, through Name.com, Inc., and resolves to the IP address 216.150.16.193. VirusTotal reports 0 detections out of 95 engines, suggesting the site has not yet been widely flagged by automated scanning tools. However, it appears on 4 security blocklists and is referenced in 2 AlienVault OTX threat intelligence pulses. Google Safe Browsing explicitly flags the domain under the SOCIAL_ENGINEERING category, corroborating its malicious intent. The site employs Vercel for hosting and enforces HSTS, which may be leveraged to lend an air of legitimacy while masking its fraudulent purpose. As of the latest assessment, walletbase.app has been taken offline, likely in response to its inclusion on multiple blocklists and detection by security platforms. Despite its current unavailability, the domain remains a residual risk due to its recent registration and potential for reactivation. Users who may have interacted with the site are advised to revoke any connected wallet permissions, monitor for unauthorized transactions, and verify the authenticity of any cryptocurrency-related communications. Organizations should update blocklists to include this domain and its associated IP to prevent future access attempts. The elevated risk level persists due to the domain’s association with known threat intelligence sources and its prior impersonation of a high-value cryptocurrency brand.