mtbase[.]sbs

The domain mtbase.sbs is currently classified as a high-risk brand impersonation threat targeting the legitimate brand Base. The domain was created on June 15, 2026, and has been flagged as active, with a Gridinsoft trust score of 0 out of 100, indicating a complete lack of trustworthiness. It resolves to the IP address 104.21.24.250, which is associated with suspicious activities. Security measures are essential given that this domain appears on three security blocklists, including ScamSniffer, PhishDestroy, and BLP-Malware, highlighting its malicious nature in the cyber threat landscape.

Additionally, an assessment using VirusTotal revealed that only 2 out of 95 security vendors have flagged the domain, underscoring a potential gap in detection capabilities for this specific threat. The SSL certificate for mtbase.sbs is issued by Google Trust Services, which could mislead users into believing that the domain is legitimate due to the presence of a valid certificate. However, the current status of the domain remains active, which poses a risk to unsuspecting users who may encounter it.

Further analysis from AlienVault OTX indicates that mtbase.sbs has been referenced in 14 threat intelligence pulses, emphasizing its relevance in ongoing phishing campaigns targeting the brand Base. The ongoing threat is exacerbated by the anonymity provided by Dynadot Inc, the registrar through which the domain was registered. Therefore, users and organizations should be vigilant in identifying potential phishing attempts associated with mtbase.sbs, especially in communications that may mimic official correspondence from the brand Base.

Defenders are advised to implement robust email filtering techniques and user training to raise awareness of phishing tactics. Blocking the IP address 104.21.24.250 and monitoring for any communications that reference mtbase.sbs can be effective measures in mitigating the threat posed by this domain.