lite-base[.]top

Analysis of lite-base.top, created on 21 November 2025 and currently taken offline, shows a high‑risk phishing infrastructure. The site presented a page titled “Bulk Email Sender – Professional Email Marketing Platform,” a generic title often used to lure victims into submitting credentials. Google Safe Browsing flags the domain for social engineering, and 14 of 95 VirusTotal scanners have identified malicious behavior, confirming its abusive nature. The domain resolves to IP 162.55.90.94, hosted in Germany under AS24940 (Hetzner Online GmbH), and is served by four nameservers belonging to lytehosting.com.

Registration was performed through Global Domain Group LLC, a registrar frequently associated with disposable or rapidly‑cycled domains. No SSL certificate is deployed, indicating the site operated over plain HTTP, a common trait of low‑cost phishing kits. The Gridinsoft trust score of 0/100 further underscores the lack of legitimacy. The domain appears on a single security blocklist and has been blocked by PhishDestroy, showing that at least some defensive feeds have ingested the indicator.

Although the site is offline, its recent creation date, hosting profile, and detection history suggest a short‑lived campaign targeting users with a crypto‑related scam. Defenders should continue to block the IP and associated nameservers, update URL filtering and email security policies to reject any reference to lite-base.top, and monitor for repurposing of the same hosting assets. Additional scrutiny of traffic to Hetzner‑hosted ranges may reveal related infrastructure, and any future re‑registration of the domain should be treated as hostile.