ababase[.]org

The domain ababase.org was registered on October 1, 2023 through Dynadot LLC and resolves to the IP address 199.59.243.228, which is hosted within Amazon.com, Inc. (AS16509) in the United States. The site presents a page title identical to the domain name and returns an HTTP 200 response, indicating that the web server is reachable despite the current offline status reported by threat intelligence. No SSL certificate is observed, meaning traffic is unencrypted and susceptible to interception. Infrastructure analysis shows the domain uses the public DNS servers ns1.dyna-ns.net and ns2.dyna-ns.net, a common configuration for rapidly provisioned malicious sites.

The Gridinsoft trust score of 0 / 100 and the fact that the domain is listed on a single security blocklist further corroborate its malicious nature. VirusTotal scans have recorded four detections out of ninety‑five security vendors, and the site is actively blocked by the PhishDestroy service. The phishing kit identified is an "Airdrop Scam," and the broader classification is a crypto‑related scam. These indicators collectively suggest that ababase.org is being used to lure victims into fraudulent cryptocurrency offers.

Uncertainty remains around the exact content hosted on the page, as the analysis is limited to metadata; no visual or functional details have been captured. Defenders should continue to block the domain at network perimeter controls, monitor DNS queries for the associated nameservers, and add the IP address to threat‑intel feeds. Because the site is already offline, remediation focus should shift to preventing re‑hosting on similar cloud infrastructure and ensuring that any related phishing kits are added to detection signatures.