portal-conbase-extention-en[.]pages[.]dev

The domain portal-conbase-extention-en.pages.dev has been identified as a high-risk brand impersonation threat, specifically targeting the Base brand. This domain has been flagged for phishing activities, posing a significant risk to users who may inadvertently provide sensitive information under the guise of interacting with a legitimate service. The impersonation of well-known brands can lead to unauthorized access to user accounts, financial loss, and potential identity theft.

Evidence supporting the malicious nature of this domain includes its flagging by 12 out of 95 security vendors on VirusTotal, indicating a consensus among security experts about its threat potential. The domain was created on November 08, 2025, and is registered through Cloudflare, Inc. It resolves to the IP address 188.114.97.3, located in the United States under AS13335 Cloudflare, Inc. Additionally, it appears on one security blocklist and is specifically blocked by PhishDestroy. Google Safe Browsing also flags the site as phishing, further corroborating its malicious intent.

Users who have visited this domain are advised to immediately review their account security for any services associated with the Base brand. This includes changing passwords, enabling two-factor authentication, and monitoring for unauthorized transactions or communications. It is crucial to remain vigilant and verify the legitimacy of any communications purportedly from Base or similar brands. In the event of suspected phishing attempts, reporting the incident to relevant cybersecurity authorities can help mitigate further risks.