getstarted-basepro[.]wixstudio[.]com

This domain, getstarted-basepro.wixstudio.com, is identified as a high-risk brand impersonation threat targeting Base, a cryptocurrency platform. Analysis indicates the site was designed to deceive users through social engineering, likely leveraging Base’s branding to extract sensitive information or distribute malicious payloads. No specific drainer kit signatures were detected in the available telemetry, though the infrastructure aligns with common phishing deployment patterns. Infrastructure analysis reveals the domain was registered through GoDaddy.com, LLC on April 27, 2026, an anomalous future date suggesting potential data manipulation or misconfiguration. It resolves to IP address 34.144.206.118 and employs technologies including Wix, React, Google Cloud CDN, and HSTS. Security vendor detections on VirusTotal stand at 13/95, while Google Safe Browsing categorizes it under SOCIAL_ENGINEERING. The domain appears on one security blocklist and is currently assigned a trust score of 0/100 by Gridinsoft. The SSL certificate is issued by Let’s Encrypt, a common choice for both legitimate and malicious sites. As of the latest assessment, the domain has been taken offline, returning a 404 error page titled '404 Error: Page Not Found | Wix Studio.' While the immediate threat is mitigated, residual risk remains due to the domain’s registration persistence and potential for reactivation. Organizations are advised to monitor for re-emergence, block the domain and associated IP at perimeter defenses, and alert users to the historical impersonation attempt. Further investigation into the hosting infrastructure is recommended to identify related threat clusters.