aspfinshares[.]com

This domain, aspfinshares.com, was registered on March 30, 2025 through Dynadot LLC and is currently hosted on the IP address 163.61.188.222, which belongs to AS153568 NEW DHAKA HARDWARE and resolves to a United States location. The site presents the page title “Asprofin Finance Shares” and is classified as a crypto‑scam impersonating the brand “base”. Passive DNS records show a single MX entry pointing to aspfinshares.com, and the domain resolves to four LyteHosting name servers (dns1‑dns4.lytehosting.com). An SSL certificate issued by Let’s Encrypt (R12) is active, indicating HTTPS support at the time of takedown. Technical fingerprinting reveals the use of Zoho services, Google Maps integration, Bootstrap front‑end framework, LiteSpeed web server, Weglot translation, SweetAlert dialogs, OWL Carousel sliders, and Lightbox image handling.

VirusTotal has flagged the domain on 15 of 95 scanned engines, and it appears on one external blocklist. PhishDestroy also lists the domain as blocked. Gridinsoft assigns a trust score of 0 out of 100, reinforcing the malicious assessment. The site’s current HTTP status is offline, confirming that the hosting has been taken down or the domain is no longer serving content.

The available evidence confirms that aspfinshares.com is an active infrastructure component of a cryptocurrency‑focused impersonation campaign targeting users of the “base” brand. However, the exact payload, credential‑harvesting mechanisms, and any associated command‑and‑control infrastructure have not been publicly released. Analysts should continue to monitor passive DNS and SSL certificate changes for re‑activation, block the IP address and domain at perimeter defenses, and add the domain to internal threat‑intel feeds. Organizations using the “base” brand should alert users to the fraudulent “Asprofin Finance Shares” title and advise against any unsolicited crypto transactions originating from this URL.