dashboard-zerobase[.]xyz

This domain, dashboard-zerobase.xyz, is identified as a brand impersonation threat targeting Base, a decentralized platform. The site mimics legitimate Base infrastructure to deceive users into disclosing sensitive credentials or authorizing fraudulent transactions. Analysis indicates the domain was designed to exploit trust in the Base brand, likely distributing malicious payloads or harvesting authentication details under false pretenses. The campaign appears to leverage social engineering tactics, presenting itself as an official dashboard to lower user vigilance during interactions. Infrastructure analysis reveals the domain was registered through Dynadot LLC on March 13, 2026, and currently resolves to the IP address 188.114.96.3. Security vendor detections on VirusTotal report 7 out of 95 engines flagging the domain as malicious, while it appears on four distinct security blocklists. The domain employs Cloudflare as a content delivery network and uses a Let's Encrypt SSL certificate, which may contribute to its superficial legitimacy. Despite its current offline status, the domain's historical activity and registration details suggest a coordinated effort to impersonate Base's operational environment. Users who accessed dashboard-zerobase.xyz should immediately revoke any active sessions or authorizations granted during the interaction. It is recommended to audit all connected accounts for unauthorized transactions or configuration changes. If credentials were entered, they should be reset from a secure device, and multi-factor authentication should be enabled where available. Monitoring for anomalous activity across linked services is advised, as the domain's infrastructure and detection metrics indicate a deliberate attempt to compromise user security.