base-app[.]ar[.]io

This report analyzes the domain base-app.ar.io. The site presented a page titled "Base Account" and was identified as a Crypto Scam that impersonates the legitimate Base brand. The primary threat posed by this site was social engineering, as flagged by Google Safe Browsing, likely attempting to trick users into revealing credentials or cryptocurrency assets under the guise of a legitimate account service.

Technical evidence confirms the malicious nature of this domain. VirusTotal detected the site as malicious by 9 out of 95 security vendors. The domain was flagged by ChainPatrol, alphaMountain.ai, CRDF, CyRadar, and Fortinet. Google Safe Browsing listed the site as FLAGGED with a threat type of ["SOCIAL_ENGINEERING"]. The site was also present on 4 blocklists. The domain was registered with GANDI SAS and created on 2003-09-22. The IP address was 54.192.35.123, located in Germany and hosted by AS16509 Amazon.com, Inc. The SSL certificate was issued by Amazon / Amazon RSA 2048 M04.

As of the time of analysis, the site is DOWN/OFFLINE. The risk level for users who may have previously interacted with this site is considered high due to the confirmed social engineering and crypto scam nature, supported by multiple security vendor detections.