Phishing Analysis: BaseSwap

Visual Capture

Screenshot of guid-baseswap-dex.pages.dev

Detection Info

http://guid-baseswap-dex.pages.dev

Detected Brand

BaseSwap

Country

Unknown

Confidence

95%

HTTP Status

200

Report ID

c9c5c59b-f54…

Analyzed

2026-04-07 03:41

Final URL (after redirects)

https://guid-baseswap-dex.pages.dev/

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T1D2919411A1B01229099A0901767A23DF822CD55CF7230BA936BDD33C96C559DCEBBF9A
CONTENT ssdeep	96:TPdznqFBksyZ5ErBtURFLXZnklXurSJT/GoUL:z9Z59R7nkAYLGoK

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	b80f2b24d0dce367
VISUAL aHash	000000ffffffffff
VISUAL dHash	eb7b5f003e36349c
VISUAL wHash	000000ffcfc7dfcf
VISUAL colorHash	07007000000
VISUAL cropResistant	5f003c1c36343c9c,ffffff69efffff7f

Code Analysis

Threat Level ALTO

⚠️ Phishing Confirmed

📊 Risk Score Breakdown

Total Risk Score

40/100

🔬 Comprehensive Threat Analysis

Threat Type

BaseSwap Phishing Landing Page

Target

BaseSwap users

Attack Method

Phishing webpage

Exfiltration Channel

Form submission (backend endpoint not detected - likely JavaScript-based)

Risk Assessment

LOW - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)

🏢 Brand Impersonation Analysis

Impersonated Brand

BaseSwap

Official Website

N/A

Fake Service

Token swap/DEX platform

⚔️ Attack Methodology

Primary Method: Brand Impersonation Redirect

Impersonates BaseSwap to build victim trust through search engine manipulation or malicious advertisements. Often redirects to credential theft pages or serves malware disguised as legitimate software.

Secondary Method: Standard Phishing Techniques

Uses typical phishing tactics including brand impersonation, urgency tactics, and social engineering to trick victims into providing sensitive information.