rewards-based[.]one

This domain, rewards-based.one, is flagged as a brand-impersonation threat targeting Base, a cryptocurrency platform. Analysis indicates the domain hosted a fraudulent rewards proposal page titled 'Based Rewards Proposal | Eligible Voters Receive Rewards,' designed to deceive users into engaging with malicious content under the guise of legitimate voter incentives. No drainer kit signatures were detected, but the structure aligns with common phishing tactics used to harvest credentials or distribute malware. Infrastructure analysis reveals the domain was registered on March 09, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, and resolves to IP address 188.114.96.3. It is detected by 2 out of 95 security vendors on VirusTotal and appears on three security blocklists. Technologies identified include Cloudflare, Cloudflare Browser Insights, and HTTP/3, suggesting an attempt to obscure malicious activity behind legitimate infrastructure. The domain is not currently listed on Google Safe Browsing. As of the latest assessment, rewards-based.one has been taken offline, likely due to enforcement actions by security providers. However, the domain remains registered, posing a residual risk of reactivation or repurposing. Users are advised to treat any future communications or links associated with this domain as malicious. Organizations should monitor for related infrastructure, such as newly registered domains under the same registrar or IP range, and update blocklists accordingly.