deutcommplc[.]net

On July 23, 2026 analysts observed that the domain deutcommplc.net is associated with a brand‑impersonation campaign targeting the Base brand. The site’s page title reads “Deut Commercial Bank Plc,” suggesting an attempt to masquerade as a legitimate financial institution, while the intelligence record explicitly lists “Impersonates: base.” The domain was registered on March 30, 2023 through HOSTINGER operations, UAB, and is hosted on IP address 163.61.188.5, which belongs to AS153568 NEW DHAKA HARDWARE and is geolocated to the United States. DNS resolution points to four nameservers – dns1.lytehosting.com, dns2.lytehosting.com, dns3.lytehosting.com, and dns4.lytehosting – all typical of shared hosting environments. No TLS certificate was presented for the site, indicating that traffic is unencrypted and potentially vulnerable to interception.

Malware and URL reputation services have flagged the domain; VirusTotal reports six of ninety‑five scanners labeling it malicious, and Gridinsoft assigns a trust score of zero out of one hundred. The domain appears on a single security blocklist and has been actively blocked by the PhishDestroy mitigation service. Current monitoring indicates that the site is offline, though its elevated risk rating implies that the infrastructure could be re‑activated.

Uncertainty remains regarding the exact content served while the site was live, as no visual or structural analysis is available. Defenders should continue to block the domain and its hosting IP, add the nameservers to watch lists, and monitor for re‑registration or similar domains created through the same registrar. Ongoing vigilance is recommended to detect any resurgence of the impersonation campaign or related infrastructure.