baser[.]cfd

This report details the technical threat assessment for the domain baser.cfd. The site’s page title, “Just a moment...,” combined with the impersonated brand “Base” and the identified scam type of “Impersonation,” indicates this domain was configured to mimic a legitimate Base-branded service, likely to deceive users into providing credentials or sensitive information. The primary threat is phishing or credential harvesting, where visitors are redirected to a fraudulent login page.

Technical evidence confirms the malicious nature of this domain. VirusTotal shows 8 out of 95 security vendors flagged the site as malicious, with detections from alphaMountain.ai, CRDF, Fortinet, Gridinsoft, and Lionic. The domain is listed on 3 blocklists. It was registered on 2026-02-21 through the registrar Global Domain Group LLC, and resolves to IP address 172.67.153.227, hosted on AS13335 (Cloudflare, Inc.) in the United States. The domain uses nameservers donna.ns.cloudflare.com and ken.ns.cloudflare.com, and has no SSL certificate.

As of the analysis, the site is reported as DOWN/OFFLINE, with a GridinSoft trust rating of 0/100, indicating high risk. Despite being offline, the domain remains a significant threat due to its recent creation and impersonation of a legitimate brand. Risk level is assessed as high, and continued monitoring is recommended to detect any reactivation.