base-apps-extension[.]wixstudio[.]com

base-apps-extension.wixstudio.com is flagged for brand impersonation, specifically targeting the Base brand. The domain was designed to mimic the appearance and functionality of legitimate Base services, potentially misleading users into believing they are interacting with a trusted platform. This impersonation can lead to credential theft, financial loss, and the unauthorized distribution of user data.

Analysis indicates that the domain has been detected by 6 out of 95 security vendors on VirusTotal, suggesting a significant level of concern among security professionals. The domain was registered through GoDaddy.com, LLC, and has appeared on 5 security blocklists, including MetaMask, PhishDestroy, PhishingArmy, SEAL, and OISD. The infrastructure analysis reveals that the domain resolved to the IP address 34.144.206.118 and utilized technologies such as Wix, React, Google Cloud, RequireJS, Lodash, HSTS, Google Cloud CDN, and HTTP/3. Additionally, the SSL certificate was issued by Let's Encrypt, which is a common practice for phishing sites to appear more legitimate.

If users have visited base-apps-extension.wixstudio.com, they should immediately change their passwords for any accounts related to Base or other sensitive services. Users are advised to monitor their accounts for any unusual activity and to report the incident to Base's customer support. It is also recommended to run a full system scan using reputable antivirus software to ensure no malware was installed during the visit.