app[.]aetbaseniorproducts[.]com

This domain, app.aetbaseniorproducts.com, operates as a high-risk brand impersonation site specifically targeting users of Base, a Layer 2 blockchain network. Analysis indicates the domain was engineered to mimic legitimate Base wallet interfaces, likely to harvest cryptocurrency wallet credentials or deploy malicious smart contracts designed to drain user funds. The page title, 'aetbaseniorproducts.com,' suggests an attempt to obfuscate its true purpose while leveraging social engineering tactics to exploit trust in the Base brand. Infrastructure analysis reveals multiple technical indicators of malicious intent. The domain was registered on February 21, 2026, through GoDaddy.com, LLC, an uncommon registrar choice for legitimate cryptocurrency services. It resolves to the IP address 66.175.209.179, hosted on AS63949 (Akamai Connected Cloud) in the United States. Detection metrics further substantiate the threat: VirusTotal reports 14 out of 95 security vendors flagging the domain as malicious, while Google Safe Browsing explicitly classifies it as a phishing site. The domain appears on one security blocklist, and its SSL certificate (R13) does not align with typical configurations for secure cryptocurrency platforms. Users who interacted with app.aetbaseniorproducts.com should assume credential or wallet compromise. Immediate actions include revoking all active wallet sessions, transferring assets to a new wallet address, and scanning local devices for malware using updated security tools. Cryptocurrency transactions initiated through this domain should be treated as irrecoverable. Affected users are advised to monitor connected accounts for unauthorized activity and report the incident to relevant blockchain security teams for further mitigation.