Is baseweb3wallets.com a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a single-page domain whose homepage is titled "Wallet" and carries only a minimal amount of text. The domain name suggests a crypto-wallet service on the Base blockchain ecosystem. The capture gives a visitor no products, pricing, company description or documented business model, so its purpose can only be inferred from the name and title. The page is a thin front end that could be used to attract visitors looking for wallet-related services.

Scam/Impersonation Risk: The site carries confirmed contradictory signals. It is listed on external blacklists, and several independent security engines classify the domain as malicious or suspicious. These include two tier-one security vendors, and the detections are strong enough to be treated as corroborated rather than a one-off false positive. The domain also matches a known-phishing indicator. No brand impersonation or conflicting legal identities were observed, because the page names no brand or entity to compare. The risk therefore comes from the blacklisting and detections, not from an identified impersonated brand. A wallet-themed domain that is newly registered and already flagged is a pattern commonly associated with credential-harvesting and wallet-drainer campaigns. The behavioural sandbox did not observe wallet-connection prompts, clipboard manipulation, hidden forms, external posts or cloaking in three successful runs. The page also produced a high volume of console errors, which is consistent with an unfinished or hastily assembled page. The absence of those behaviours in this capture does not offset the external detections, because a page can be switched to a malicious payload after a clean capture. Separately, community abuse reports against the hosting IP are attributed to shared provider infrastructure rather than to this domain alone. They are therefore a secondary, contextual signal and do not carry the weight of the blacklist hits. Evidence:

Regulatory Verification Notes: The captured homepage shows no legal entity, licence, registration number, terms or privacy pages, or other disclosures that could be assessed. Any claim to operate a regulated wallet, custody or financial service would therefore be entirely unsupported by the site itself. Ownership is opaque: the registration record does not identify a responsible party, and the registrar is Sav.com, LLC. That opacity compounds the blacklist findings. No third-party broker or regulatory-database match exists for the domain, so no external reputational context supports the site. The valid transport encryption is a baseline hygiene measure that any operator can obtain, and it does not indicate legitimacy. Evidence:

What to Verify Next: No interaction with this site should be initiated on the strength of its own content. Anyone who reached it through a link, message or advertisement should trace that source and treat it as potentially malicious. The genuine service of any wallet provider should be located through its officially published channels, not through this domain. If a regulated service is claimed, the licence should be confirmed directly in the relevant regulator's public register, and the official support channels should be confirmed through an independent route. Anyone who has already connected a wallet, approved a transaction or entered credentials on this domain should revoke token approvals and move assets to a fresh wallet. Security teams should consider blocking the domain pending any later clean re-assessment. Evidence:

Summary Verdict: The site is assessed as high-risk and unsuitable for any sensitive interaction. External blacklist and malicious-detection evidence is the decisive factor. It combines with a very recently created domain, no operator identity and almost no content. No available evidence outweighs those findings, and the only safe use is passive observation.

Infrastructure Integrity: The domain resolves to a single address at a general-purpose hosting provider in Germany. No CDN or WAF fronts it, so there is no protective layer to mitigate the reputational findings. Heuristic indicators of a young domain with a sparse DNS footprint are consistent with a recently stood-up deployment. They are unconfirmed and are not treated as independent risks.

Closing Assessment: The site should not be used for login, credential entry, wallet connection, transactions or any financial activity. Read-only viewing in an isolated environment is the outer limit of safe handling, and no files should be downloaded. Organisations should block or monitor the domain and report any phishing attempt that points to it.

• Homepage: the title is only "Wallet" and the visible text is minimal, so the page presents no verifiable service, operator or terms.
• Threat-intelligence results: the domain is blacklisted, and the detections include two tier-one security vendors.
• Domain provenance: registered in September 2026 (~0.14 years, about 52 days old).
• Web archive: only 3 snapshots, spanning 2026-09-11 to 2026-09-22 (1 year tracked), so there is no established history.
• Behavioural sandbox: 108 console errors across 3 runs, with no external network calls and no wallet-connect, clipboard or hidden-form activity.
• Homepage: no company name, licence, address or legal pages appear in the captured content.
• Registration record: Sav.com, LLC is the registrar; the domain was created on 2026-09-03 and expires 2027-09-03.
• Transport encryption: TLS certificate issued by YR1 (domain-validated only) and valid to 2026-12-02.
• Hosting: served from AS214036 (Ultahost, Inc.), with the server located in Germany.
• Homepage: it offers no verifiable service or operator that could be checked, so verification has to start outside the site.
• Threat-intelligence results: the blacklist status is current and should be rechecked before any change in posture.
• Domain provenance: the domain is only weeks old and has no independent history to rely on.

Signals weighed against the site

• AbuseIPDB: 3 reports on hosting IP 79.133.41.203 (UltaHost Inc, Data Center/Web Hosting/Transit), 10% confidence. The reports are attributed to shared infrastructure, not specifically to this website.