mass.report
Scan Intelligence Report0/100
high Risk
www.sportsbasementswim.com
https://www.sportsbasementswim.com/
IP
104.21.76.181 · Cloudflare, Inc.
Location
Toronto, Canada
Domain Age
22 days
HTTP
200 · 43.8s
SSL
Valid· E7, Let's Encrypt, US
Status
COMPLETED
Linked Phishing Report
This scan is attached to a vendor submission report
Brand
Sports Basement
Vendors
3/3
Status
completed
✓ spamhaus✓ kaspersky✓ google
Registered-domain escalation
Submit sportsbasementswim.com as the primary IOC, enriched with evidence from hostile subdomains like www.sportsbasementswim.com.
KB/IOK Matches (0)—
No KB/IOK detections were recorded for this scan.
Sports Basement
UnknownE-Commerce · 7/19/2026
Summary
The page presents branding for Sports Basement with Finnish language branding and a Sports Basement logo, but the registered domain is www.sportsbasementswim.com, a newly created domain (22 days old) with a Let's Encrypt certificate. The page contains a login form and password fields in static HTML, and numerous assets and endpoints that suggest a dynamic e-commerce site. However, the domain name differs from the visible brand, indicating potential impersonation or misalignment between domain and branding. No definitive credential harvesting or malware delivery is observed in the data provided, but the combination of a first-party login surface on a recently created domain with impersonation-like branding warrants caution and further investigation.
Evidence Summary
▸Observed 2 capture stage(s); canonical stage is settled_render.
▸Canonical stage contains password collection UI.
▸POST targets observed during capture: https://www.sportsbasementswim.com/cdn-cgi/rum?, https://www.sportsbasementswim.com/?wc-ajax=get_refreshed_fragments, https://www.sportsbasementswim.com/wp-admin/admin-ajax.php.
▸Distinctive asset clues: 8hly3.js, 8hly4.js, 8hly3.css, FS25_LT2.1_kategoriebanner_herren_bademode_1920x1080px.jpg, SB_Logo_Rectangle.svg.
Capture
Stages: 2
Canonical: Settled Render
Changed: No
Credential Signals
Forms: 5
Password fields: 2
Late-stage login UI: No
Resource Signals
Resources: 70
Hosts: 2
Domains: 2
Suspicious Endpoints
hxxps://www[.]sportsbasementswim[.]com/
Observed Signals (3)
Brand impersonation signals: page shows 'Sports Basement' branding while domain is 'sportsbasementswim.com' (not the official domain).Credential collection UI: presence of login form and password field in HTML source.External script loading: multiple external JS assets (8hly3.js, 8hly4.js, etc.) and a large number of resources from a single domain, which can be used to observe and potentially exfiltrate data in SPA contexts.
Observed Indicators (0)
No suspicious indicators identified
Risk AssessmentUsed in abuse reports
The domain sportsbasementswim.com is a newly registered host that uses a legitimate CA and Cloudflare fronting. The page visually clones a recognizable brand (Sports Basement) but the domain name does not match the official brand domain, which constitutes a strong impersonation indicator. The presence of a login form and password field on a domain that is newly registered raises risk of credential harvesting if users are directed to this site. However, the evidence does not conclusively show active credential theft at this time; it warrants heightened monitoring and potentially takedown actions if further signals confirm credential capture attempts or misrepresentation at scale.
Recommended Action
Monitor
Cross-Reference8
URL Intelligence
Domain Intelligence
IP Intelligence
Public threat feed available — JSON API