aqbitbase[.]cc

The domain aqbitbase.cc has been confirmed as a phishing site engaged in brand impersonation targeting Base, a cryptocurrency platform. Analysis indicates the site was designed to deceive users into believing they were interacting with the legitimate Base infrastructure, likely for fraudulent purposes such as credential harvesting or crypto asset theft. The domain is currently offline, though its prior activity warrants continued monitoring. Infrastructure analysis reveals the domain was registered through Dynadot LLC on December 05, 2025, and resolved to the IP address 172.67.210.226, hosted on Cloudflare's network (AS13335). Security vendors flagged the domain as malicious, with 13 out of 95 VirusTotal engines detecting it as a threat. The domain appears on two security blocklists and was actively blocked by at least two anti-phishing services. The SSL certificate was issued by Google Trust Services (WE1), a common tactic to lend superficial legitimacy to fraudulent sites. Given the domain's history, organizations and users are advised to treat any future activity from aqbitbase.cc or related infrastructure as high-risk. Network administrators should implement DNS-based blocking for the domain and its associated IP address. Users who may have interacted with the site should verify their accounts for unauthorized access and monitor for suspicious transactions. Continuous threat intelligence monitoring is recommended to detect potential resurgence or shifts in tactics.