contactbase[.]site

This domain, contactbase.site, was registered on 21 February 2026 through NameSilo, LLC. DNS resolution points to 195.161.114.166, an address announced by AS8342 JSC RTComm.RU located in Russia. The authoritative nameservers are ns1.jino.ru, ns2.jino.ru, ns3.jino.ru, and ns4.jino.ru, all belonging to the same provider. No TLS certificate is presented, indicating the site is served only over HTTP. The page title returned from the live host was “ContactBase”, but the site has been taken offline and is currently listed as offline in intelligence feeds. Security scanners have flagged the domain: twelve of ninety‑three VirusTotal vendors reported it as malicious, and Google Safe Browsing classifies the URL as social‑engineering.

The threat is catalogued as a brand‑impersonation phishing campaign. PhishDestroy has already added the domain to its blocklist, and it appears on one additional security blocklist. Evidence confirms the infrastructure, but the exact payload, phishing kit, or compromised credentials have not been publicly disclosed. Analysts lack screenshots or content analysis beyond the page title, so the specific brand being impersonated cannot be confirmed from the available data.

Consequently, the precise victim targeting and lure techniques remain uncertain. Defenders should block DNS resolution to 195.161.114.166 and add contactbase.site to URL filtering and email gateway deny lists. Monitoring of outbound connections to the Jino.ru nameserver set and the Russian ASN is recommended, as is periodic re‑scanning of the domain for any re‑appearance. Given the existing vendor detections and Safe Browsing flag, the domain should be treated as high‑risk until it is demonstrated to be clean.