cpcalendars[.]crestbasepanel[.]com

The domain cpcalendars.crestbasepanel.com is a phishing site engaged in brand impersonation targeting users of the cryptocurrency platform Base. It presents itself as a legitimate service but is designed to execute a crypto scam, tricking victims into interacting with fraudulent pages. No drainer kit was identified, and the site is currently taken offline, reducing immediate risk but not eliminating potential follow-up threats.

Technical analysis shows cpcalendars.crestbasepanel.com was flagged by 2 of 95 security vendors on VirusTotal, including ChainPatrol and SOCRadar, while appearing on 1 security blocklist (PhishDestroy). The domain was registered on 2025-10-20 20:52:02 through Global Domain Group LLC and resolves to the IP address 198.251.88.188, hosted by FranTech Solutions in the US. Its SSL certificate was issued by Let's Encrypt (R13), and the observed page title was 'Bot Verification'. The site returned an HTTP 401 status and used nameservers ns7.my-control-panel.com and ns8.my-control-panel.com. Google Safe Browsing did not flag the domain at the time of assessment.

Users who interacted with cpcalendars.crestbasepanel.com should immediately revoke any token approvals granted to unknown contracts and transfer funds to a new wallet. Enable two-factor authentication on all cryptocurrency accounts and monitor for unauthorized transactions. Report the domain to the impersonated brand (Base) and submit it to platforms like PhishTank, Google Safe Browsing, or local cybersecurity authorities to aid in broader takedown efforts.