baseapp[.]dev

This domain, baseapp[.]dev, is a confirmed phishing site designed to impersonate the Base cryptocurrency wallet platform. The site presents a fraudulent interface mimicking legitimate wallet services, likely aiming to harvest user credentials, private keys, or seed phrases. Victims may unknowingly expose sensitive financial data, leading to unauthorized access and theft of digital assets. The site employs convincing visual elements and technical infrastructure to deceive users into believing it is the official Base platform. Analysis indicates baseapp[.]dev was registered on July 13, 2025, through ENOM, INC., a registrar frequently exploited for malicious domains. At the time of detection, 6 out of 95 security vendors on VirusTotal flagged the domain as malicious, and it appears on 2 security blocklists, including PhishDestroy and OISD. The domain resolves to the IPv6 address 2620:1ec:46::40 and uses an SSL certificate issued by DigiCert Inc. Infrastructure analysis reveals the use of Azure Front Door, Azure hosting, React framework, and HTTP Strict Transport Security (HSTS), which are commonly employed to lend an air of legitimacy to phishing sites. If you visited baseapp[.]dev or interacted with its content, immediate action is required. Disconnect the device from the internet to prevent further data exfiltration. Clear all browser data, including cookies, cache, and saved passwords, as the site may have deployed tracking or credential-stealing scripts. If you entered any sensitive information, such as wallet credentials or private keys, consider those credentials compromised. Rotate all passwords and keys associated with cryptocurrency wallets or financial accounts, and monitor accounts for unauthorized transactions. Report the incident to your organization’s security team or a trusted cybersecurity professional for further analysis and remediation.