app-hybra[.]com

Analysis of the domain app-hybra.com confirms its classification as a crypto scam site targeting users of the Base platform. The domain was registered on February 21, 2026, through HOSTINGER operations, UAB, a registrar frequently associated with abusive registrations. Infrastructure analysis reveals the domain resolved to the IP address 84.32.84.32, geolocated in Lithuania and assigned to AS47583 (Hostinger International Limited). At the time of assessment, the domain displayed a page titled 'Parked Domain name on Hostinger DNS system,' indicating it was not actively serving malicious content but may have been in a preparatory or dormant state.

Detection data supports the malicious classification: the domain appears on one security blocklist (PhishDestroy) and is flagged by one of 93 security vendors on VirusTotal as malicious. Gridinsoft assigns a trust score of 0/100, further corroborating the elevated risk level. The SSL certificate (R11) does not provide additional indicators of compromise but aligns with common practices observed in low-reputation hosting environments. While the exact content of the site remains unanalyzed, the available evidence—including the scam type designation as a 'Crypto Scam' and the explicit targeting of the Base brand—aligns with known patterns of cryptocurrency-related fraud.

Defenders are advised to treat this domain as confirmed malicious infrastructure. Network-level blocking of the IP 84.32.84.32 and monitoring for related domains registered via HOSTINGER operations, UAB, are recommended mitigation steps. Given the domain's current offline status, further monitoring for reactivation or migration to new infrastructure is warranted.