dappsauth[.]firebaseapp[.]com

This domain, dappsauth.firebaseapp.com, poses a high-risk brand impersonation threat targeting users of the Base blockchain platform. Analysis indicates the site operates as a crypto drainer, presenting itself as a legitimate synthetic protocol under the page title 'Dapps Leading Synthetic Protocol.' The fraudulent infrastructure is designed to harvest wallet credentials, private keys, or seed phrases, enabling attackers to drain digital assets from victims' accounts upon interaction. The domain specifically mimics Base’s branding and protocol interfaces, exploiting user trust in decentralized application ecosystems to facilitate unauthorized access and fund exfiltration. Infrastructure analysis reveals multiple concrete indicators of malicious activity. The domain is flagged by 15 out of 95 security vendors on VirusTotal, with a notably low Scamadviser trust score of 1 out of 100. It appears on five distinct security blocklists, including Codeesura, Polkadot, ScamSniffer, PhishDestroy, and Enkrypt, confirming its classification as a confirmed threat. Registered through Google LLC and hosted on Firebase, the domain resolves to the IP address 199.36.158.100, utilizing technologies such as HSTS and HTTP/3, alongside a valid SSL certificate issued by Google Trust Services. Despite these seemingly legitimate technical attributes, the combination of brand impersonation, low trust scores, and widespread security vendor detections underscores its fraudulent nature. Users who have visited dappsauth.firebaseapp.com or interacted with its content are advised to take immediate action to mitigate potential risks. First, disconnect any connected wallets from the site and revoke any suspicious smart contract approvals using a blockchain explorer or wallet management tool. Next, scan all devices used to access the domain for malware or unauthorized extensions, as crypto drainers may deploy secondary payloads. Monitor all associated wallet addresses for unauthorized transactions and consider transferring assets to a new, secure wallet if compromise is suspected. Report the domain to relevant security platforms and blockchain communities to prevent further victimization. Proactive measures, including the use of hardware wallets and multi-factor authentication, are strongly recommended to enhance security against similar threats.