connexhub[.]firebaseapp[.]com

The domain connexhub.firebaseapp.com is a high-risk phishing site engaged in brand impersonation, specifically targeting users of the Base cryptocurrency platform. This crypto scam was designed to deceive victims through fraudulent login or transaction pages, though no drainer kit was identified. As of the latest verification, connexhub.firebaseapp.com has been taken offline and currently returns a 'Site Not Found' error.

Technical indicators confirm the malicious nature of connexhub.firebaseapp.com. The domain is flagged by 11 of 95 security vendors on VirusTotal, including ADMINUSLabs, ChainPatrol, and Criminal IP, while appearing on 4 security blocklists such as PhishDestroy, Polkadot, and Enkrypt. Registered through Google LLC, the domain resolves to the IPv6 address 2620:0:890::100, hosted on Fastly’s US infrastructure (AS54113). The SSL certificate is issued by Google Trust Services (WR4), and the site employed Firebase with HSTS and HTTP/3 technologies. Scamadviser assigned a trust score of 1 out of 100, reinforcing its fraudulent classification.

Users who interacted with connexhub.firebaseapp.com should immediately revoke any token approvals granted to unknown contracts and transfer funds to a new, secure wallet. If credentials were entered, change passwords for all associated accounts and enable two-factor authentication. Report the domain to Google Safe Browsing, the impersonated brand (Base), and relevant blocklists such as PhishDestroy or Polkadot to aid in mitigation efforts.