baseswap-dex-auth-io[.]pages[.]dev

This domain, baseswap-dex-auth-io.pages.dev, was registered on April 30, 2026 through Cloudflare, Inc. and resolves to the Cloudflare edge address 188.114.96.3, which is located in Canada. The authoritative name servers are amanda.ns.cloudflare.com and ignat.ns.cloudflare.com. The site presents a valid HTTPS certificate issued by Google Trust Services / WE1 and enforces HSTS, while supporting HTTP/3. An HTTP request returns status code 200 and the page title reads “BaseSwap DEX – Fast, Low-Cost Trading on the Base Blockchain,” indicating a brand‑impersonation campaign that targets users of the Base blockchain ecosystem. VirusTotal analysis shows that 1 of 91 security vendors flagged the domain, and it is listed on a single public blocklist and has been blocked by the PhishDestroy service. The Gridinsoft trust score of 0 / 100 further reflects a high risk assessment. Current intelligence does not reveal additional payloads, redirection behaviour, or credential‑harvesting forms; the content has not been fully inspected. Defenders should treat the domain as malicious, enforce network‑level blocking of the IP address 188.114.96.3 and the fully qualified domain name, monitor DNS queries for the associated Cloudflare name servers, and consider adding the domain to existing URL filtering policies. Continuous re‑evaluation is advised in case new detections appear.