livechat[.]zenidesk[.]com

Analysis of livechat.zenidesk.com confirms active brand impersonation targeting Base, a known cryptocurrency platform. The domain was registered on February 21, 2026, through Tucows Domains Inc., and currently resolves to IP 185.165.170.10 (AS200651 FlokiNET ehf, Iceland). Nameservers are hosted under renewyourname.net, a pattern observed in other fraudulent domains. The page title 'Support: Live Support' aligns with typical live chat scam infrastructure, though the exact content and functionality remain unconfirmed due to lack of direct analysis. Infrastructure indicators include an SSL certificate (E5) and a consistent HTTP 200 status, suggesting the site is operational. The domain appears on two security blocklists, and two of 93 security vendors on VirusTotal flag it as malicious. Gridinsoft assigns a trust score of 0/100, reinforcing its high-risk classification. The scam type is explicitly labeled as a crypto scam, though specific tactics (e.g., wallet drainers, fake support) are not detailed in available data. Defenders should prioritize blocking this domain at DNS and network levels, as it remains active and exhibits multiple indicators of fraudulent intent. Monitoring for related domains using the same nameservers or IP range may uncover additional threats. No evidence suggests this domain is affiliated with legitimate Base or Zendesk infrastructure.