# PhishDestroy domain threat record: datanubia.com

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/datanubia.com/
Machine-readable companion: https://phishdestroy.io/domain/datanubia.com/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-25 16:25:55 UTC
- Last availability or vendor check: 2026-10-25 16:25:55 UTC
- Stored record updated: 2026-10-25 20:49:50 UTC
- VirusTotal detections in the stored snapshot: 0/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 216.246.46.153
- Registrar in stored WHOIS data: NAMECHEAP INC
- Registrar country in stored WHOIS data: US
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-10-18 01:46:28 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a173e0-6d4f-7178-a58e-f5776bcdd9fe/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/datanubia.com
- Certificate Transparency search: https://crt.sh/?q=%25.datanubia.com
- Web Archive lookup: https://web.archive.org/web/*/https://datanubia.com/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy added datanubia.com to its internal blocklist on 2026-10-25 after the domain was first observed by the service. The domain had been registered on 2026-10-18, giving it an age of seven days at the time of first sighting. The recorded page title read "Cloud empresarial y ciberseguridad | DATANUBIA" and the intake AI assessment noted no obvious phishing or impersonation.

How the scam works
The current listing does not demonstrate a specific fraudulent mechanism; it reflects the risk associated with a brand‑new domain that could be repurposed for phishing, credential harvesting, or other social‑engineering attacks. Because no malicious forms were observed on the page, the classification remains a precautionary flag rather than proof of active abuse.

Evidence
VirusTotal scanned the domain on 2026-10-25 and reported zero detections from 92 engines. Google Safe Browsing also returned a clean result on the same date. URLScan’s machine‑learning engine assigned a high malicious score of 96, but its overall verdict was non‑malicious; the domain appears on PhishDestroy’s internal blocklist while external blocklists reported no entries, and OTX listed three pulses referencing the domain as of 2026-10-25.

Infrastructure
The recorded IP was 216.246.46.153, associated with the DEFT.COM network in the United States, and the certificate check found a Let’s Encrypt certificate valid from 2026-10-18 to 2027-01-16. The domain was registered with NameCheap, Inc. on 2026-10-18, set to expire on 2027-10-18 and marked client‑transfer‑prohibited. DNS records observed at the time included standard A, MX, NS, TXT and SOA entries, and the scan noted open ports such as 21, 25, 53, 80, 443, 587, 993, 995, 3306, and 8888.

What to do
Treat the domain as suspicious and avoid entering any credentials, personal data, or financial information on the site. If credentials were submitted, change the associated passwords and monitor the accounts for unusual activity. Defenders should block the exact domain in web filters and review access logs for any connections to the recorded IP address.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a173e0-6d4f-7178-a58e-f5776bcdd9fe/
Cloudflare Radar report: https://radar.cloudflare.com/scan/c8503eec-7e68-4f5a-b4f4-279558006c4a
URLQuery report: https://urlquery.net/report/7912f857-5167-4aa9-9b05-6f70aa5905c9
Stored capture screenshot: https://i.ibb.co/1YXjk2cm/cf3ef0399eb7.png
Cloudflare Radar screenshot (2026-10-25T17:02:55Z): https://screenshots.phishdestroy.io/cf/c8503eec-7e68-4f5a-b4f4-279558006c4a.png
URLQuery screenshot: https://screenshots.phishdestroy.io/uq/7912f857-5167-4aa9-9b05-6f70aa5905c9.png
URLScan screenshot (2026-10-19T09:14:08Z): https://screenshots.phishdestroy.io/us/01a1536f-8174-7202-9d87-25539a570c1c.png
URLScan capture report: https://urlscan.io/result/01a1536f-8174-7202-9d87-25539a570c1c/
URLScan screenshot (2026-10-19T20:09:38Z): https://screenshots.phishdestroy.io/us/01a155c8-8fa4-720d-8b4f-8c8a9ca4d555.png
URLScan capture report: https://urlscan.io/result/01a155c8-8fa4-720d-8b4f-8c8a9ca4d555/
URLScan screenshot (2026-10-19T23:42:37Z): https://screenshots.phishdestroy.io/us/01a1568b-947e-77dc-b1f5-7a6c634bae26.png
URLScan capture report: https://urlscan.io/result/01a1568b-947e-77dc-b1f5-7a6c634bae26/
URLScan screenshot (2026-10-22T03:03:14Z): https://screenshots.phishdestroy.io/us/01a1618f-f64a-705f-82d2-bb61dffe6a92.png
URLScan capture report: https://urlscan.io/result/01a1618f-f64a-705f-82d2-bb61dffe6a92/
URLScan screenshot (2026-10-25T16:30:53Z): https://screenshots.phishdestroy.io/us/01a173e6-6ab1-710c-8642-a8e34c40f0b9.png
URLScan capture report: https://urlscan.io/result/01a173e6-6ab1-710c-8642-a8e34c40f0b9/
VirusTotal report: https://www.virustotal.com/gui/domain/datanubia.com
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=datanubia.com
Archived copy: https://web.archive.org/web/20261025162646/https://datanubia.com/
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-25 17:06:19 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/1YXjk2cm/cf3ef0399eb7.png
  Captured: 2026-10-25 16:25:55 UTC
- URLScan capture: https://screenshots.phishdestroy.io/01a173e0-6d4f-7178-a58e-f5776bcdd9fe.png
  Captured: 2026-10-25 16:25:55 UTC
  Source report: https://urlscan.io/result/01a173e0-6d4f-7178-a58e-f5776bcdd9fe/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/c8503eec-7e68-4f5a-b4f4-279558006c4a.png
  Captured: 2026-10-25 17:02:55 UTC
  Source report: https://radar.cloudflare.com/scan/c8503eec-7e68-4f5a-b4f4-279558006c4a
  SHA-256: 16399d0541585d8b5d01f8b41ed84c191a36fb8891a6ac81867be75148a84c8c
- URLQuery: https://screenshots.phishdestroy.io/uq/7912f857-5167-4aa9-9b05-6f70aa5905c9.png
  Source report: https://urlquery.net/report/7912f857-5167-4aa9-9b05-6f70aa5905c9
  SHA-256: 146e07a85cdbebf93a7bbd36895fa5e61ca09c7c9082506b3c2ed1282d4d700b
- URLScan · 2026-10-19: https://screenshots.phishdestroy.io/us/01a1536f-8174-7202-9d87-25539a570c1c.png
  Captured: 2026-10-19 09:14:08 UTC
  Source report: https://urlscan.io/result/01a1536f-8174-7202-9d87-25539a570c1c/
  SHA-256: 3816f9d9196bc159d6a253c739925124b7253a949c9948b2f48258571ade0d77
- URLScan · 2026-10-19: https://screenshots.phishdestroy.io/us/01a155c8-8fa4-720d-8b4f-8c8a9ca4d555.png
  Captured: 2026-10-19 20:09:38 UTC
  Source report: https://urlscan.io/result/01a155c8-8fa4-720d-8b4f-8c8a9ca4d555/
  SHA-256: 4c0cbfc0386e06ba90a34778a1fae34d0c3b7b920e686465d0d5d399a3382a3b
- URLScan · 2026-10-19: https://screenshots.phishdestroy.io/us/01a1568b-947e-77dc-b1f5-7a6c634bae26.png
  Captured: 2026-10-19 23:42:37 UTC
  Source report: https://urlscan.io/result/01a1568b-947e-77dc-b1f5-7a6c634bae26/
  SHA-256: 4c0cbfc0386e06ba90a34778a1fae34d0c3b7b920e686465d0d5d399a3382a3b
- URLScan · 2026-10-22: https://screenshots.phishdestroy.io/us/01a1618f-f64a-705f-82d2-bb61dffe6a92.png
  Captured: 2026-10-22 03:03:14 UTC
  Source report: https://urlscan.io/result/01a1618f-f64a-705f-82d2-bb61dffe6a92/
  SHA-256: 4c0cbfc0386e06ba90a34778a1fae34d0c3b7b920e686465d0d5d399a3382a3b
- URLScan · 2026-10-25: https://screenshots.phishdestroy.io/us/01a173e6-6ab1-710c-8642-a8e34c40f0b9.png
  Captured: 2026-10-25 16:30:53 UTC
  Source report: https://urlscan.io/result/01a173e6-6ab1-710c-8642-a8e34c40f0b9/
  SHA-256: bc739a81e6e0a177453987218299ee23277f95ccf726331b3c36c186f34fc4bd

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-25T17:05:17Z",
        "uuid": "01a173e0-6d4f-7178-a58e-f5776bcdd9fe",
        "scanned_at": "2026-10-25T16:24:24Z",
        "final_url": "http://datanubia.com/",
        "status": 200,
        "redirects": [
            {
                "to": "https://datanubia.com/",
                "from": "http://datanubia.com/",
                "status": 307
            },
            {
                "to": "http://datanubia.com/",
                "from": "https://datanubia.com/",
                "status": 307
            }
        ],
        "ip": "216.246.46.153",
        "ptr": "bh8940.banahosting.com",
        "ips": [
            "216.246.46.153"
        ],
        "asns": [
            "23352"
        ],
        "countries": [
            "US"
        ],
        "link_domains": [
            "www.datanubia.com"
        ],
        "doc_hash": "6f6a27f4be42c4c15f3f23a123b2770e057d3997be6bde0110d1111b417b9944",
        "script_hashes": [
            "ed2c3e4529361e8ba079e6661a93a02862f1c70c177ed385f60416e8b1cc71c2"
        ],
        "globals": [
            "APP",
            "apConversion"
        ],
        "domain_age_days": 6,
        "apex_age_days": 6,
        "requests": 22,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 96,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "content-type": "text/html; charset=UTF-8",
            "x-frame-options": "SAMEORIGIN",
            "x-content-type-options": "nosniff",
            "referrer-policy": "strict-origin-when-cross-origin"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-25T17:05:20Z",
        "uuid": "c8503eec-7e68-4f5a-b4f4-279558006c4a",
        "scanned_at": "2026-10-25T17:02:55Z",
        "final_url": "https://datanubia.com/",
        "status": 200,
        "history": [
            {
                "url": "https://datanubia.com/",
                "status": 200
            }
        ],
        "dom_hash": "d3b0c18fe3cb93650a6b55841b27f9b650d6678c40d65ec8784e8b2525172331",
        "doc_hash": "afdf1e99626240e497d193609a7055d85b37cc11b96649961aa00c7e33bd710a",
        "domain_risks": [
            "Newly Seen Domains",
            "Security Risks",
            "New Domains"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "datanubia.com",
                "type": "A",
                "value": "216.246.46.153"
            }
        ],
        "dnssec_valid": false,
        "ip": "216.246.46.153",
        "whois": {
            "registrar": "NameCheap, Inc.",
            "created": "2026-10-18T03:46:28Z",
            "updated": "2026-10-18T03:48:39Z",
            "expires": "2027-10-18T03:46:28Z",
            "nameservers": [
                "ns8940.banahosting.com",
                "ns8941.banahosting.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-25T17:02:15Z",
        "analysis_at": "2026-10-23T13:13:52Z",
        "stats": {
            "timeout": 0,
            "harmless": 55,
            "malicious": 0,
            "suspicious": 0,
            "undetected": 37
        },
        "reputation": 0,
        "registrar": "NAMECHEAP INC",
        "created": "2026-10-18T03:46:28Z",
        "expires": "2027-10-18T03:46:28Z",
        "updated": "2026-10-18T03:48:39Z",
        "first_seen": "2026-10-18T03:58:06Z",
        "dns": [
            {
                "ttl": 14400,
                "type": "TXT",
                "value": "google-site-verification=PoN0wSGu85PWUI0OYziLBg_fTFTE-PCNPmWCZqg7VeM"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "ns8941.banahosting.com"
            },
            {
                "ttl": 14400,
                "type": "TXT",
                "value": "v=spf1 ip4:216.246.46.146 include:relay.mailchannels.net +a +mx ~all"
            },
            {
                "ttl": 14400,
                "type": "MX",
                "value": "datanubia.com",
                "priority": 0
            },
            {
                "ttl": 14400,
                "type": "A",
                "value": "216.246.46.153"
            },
            {
                "ttl": 21600,
                "type": "SOA",
                "rname": "support.banahosting.com",
                "value": "ns8940.banahosting.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "ns8940.banahosting.com"
            }
        ],
        "dns_at": "2026-10-23T13:24:06Z",
        "jarm": "29d29d00029d29d00042d43d00041d598ac0c1012db967bb1ad0ff2491b3ae",
        "cert": {
            "san": [
                "*.datanubia.com",
                "datanubia.com",
                "datanubia.com.intelectalab.com",
                "www.datanubia.com.intelectalab.com"
            ],
            "issuer": "Let's Encrypt / YR2",
            "serial": "54c4864ec373b97526e94a50ae40f62ac4c",
            "sha256": "328616b6b156ef77230e43a4625dcf7e15218a964b003dfd871200974f9915e4",
            "subject": "*.datanubia.com",
            "valid_to": "2027-01-16T02:52:05Z",
            "valid_from": "2026-10-18T02:52:06Z"
        },
        "whois": {
            "registrar": "NAMECHEAP INC",
            "registrar_iana_id": "1068",
            "registrar_url": "http://www.namecheap.com",
            "created": "2026-10-18T03:46:28Z",
            "updated": "1-01-01T00:00:00Z",
            "expires": "2027-10-18T03:46:28Z",
            "status": [
                "clientTransferProhibited"
            ],
            "nameservers": [
                "ns8940.banahosting.com",
                "ns8941.banahosting.com"
            ],
            "dnssec": "unsigned"
        },
        "rdap": {
            "status": [
                "client transfer prohibited"
            ],
            "events": {
                "registration": "2026-10-18T03:46:28Z",
                "registrar expiration": "2027-10-18T03:46:28Z",
                "last update of RDAP database": "2026-10-18T03:54:56Z"
            }
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-25T16:43:08Z",
        "mail_config": {
            "mx": [
                "datanubia.com"
            ],
            "spf": "v=spf1 ip4:216.246.46.146 include:relay.mailchannels.net +a +mx ~all",
            "dkim": [
                "default"
            ],
            "dmarc": true,
            "dkim_bits": 2048,
            "spf_lookups": 3
        },
        "caa_records": {
            "domain": "datanubia.com"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "archives": {
            "last": "2026-10-25T16:26:46Z",
            "first": "2026-10-25T16:26:46Z",
            "changes": 0,
            "days_archived": 1,
            "avg_page_bytes": 5567
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true,
            "llms_txt": true,
            "sitemaps": [
                "https://www.datanubia.com/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 30
        },
        "social_tags": {
            "ogUrl": "https://www.datanubia.com/",
            "title": "Cloud empresarial y ciberseguridad | DATANUBIA",
            "ogType": "website",
            "robots": "index, follow, max-image-preview:large",
            "ogImage": "https://www.datanubia.com/uploads/paginas/servicios-cloud-datanubia-eae9e2.webp",
            "ogTitle": "Cloud empresarial y ciberseguridad | DATANUBIA",
            "keywords": "cloud empresarial, ciberseguridad para empresas, servicios cloud Perú, ethical hacking, servicios administrados de TI, continuidad del negocio, migración a la nube",
            "ogSiteName": "DATANUBIA",
            "themeColor": "#0f2350",
            "description": "Arquitectura cloud, ciberseguridad, servicios administrados y continuidad del negocio para empresas, universidades e instituciones públicas en Perú.",
            "twitterCard": "summary_large_image",
            "canonicalUrl": "https://www.datanubia.com/",
            "ogDescription": "Arquitectura cloud, ciberseguridad, servicios administrados y continuidad del negocio para empresas, universidades e instituciones públicas en Perú."
        },
        "trackers": {
            "requests": 0
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 3,
                "tls": 119,
                "wait": 111,
                "connect": 113,
                "download": 528
            },
            "response_ms": 874
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                21,
                25,
                53,
                80,
                110,
                143,
                443,
                587,
                993,
                995,
                3306,
                8888
            ]
        },
        "carbon": {
            "bytes": 263237,
            "co2_grams": 0.0096,
            "cleaner_than": 1
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "216.246.46.147",
                    "host": "ns8940.banahosting.com"
                },
                {
                    "ip": "216.246.46.148",
                    "host": "ns8941.banahosting.com"
                }
            ],
            "zone": "datanubia.com"
        },
        "location": {
            "ip": "216.246.46.153",
            "asn": "23352",
            "org": "DEFT.COM",
            "city": "Chicago",
            "country": "US"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YR2",
            "subject": "*.datanubia.com"
        },
        "dns": {
            "A": [
                "216.246.46.153"
            ],
            "MX": [
                "{\"exchange\": \"datanubia.com\", \"priority\": 0}"
            ],
            "NS": [
                "ns8941.banahosting.com",
                "ns8940.banahosting.com"
            ],
            "SOA": "{\"nsname\": \"ns8940.banahosting.com\", \"hostmaster\": \"support.banahosting.com\", \"serial\": 2026101808, \"refresh\": 86400, \"retry\": 7200, \"expire\": 1600000, \"minttl\": 86400}",
            "TXT": [
                "google-site-verification=PoN0wSGu85PWUI0OYziLBg_fTFTE-PCNPmWCZqg7VeM",
                "v=spf1 ip4:216.246.46.146 include:relay.mailchannels.net +a +mx ~all"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": "SAMEORIGIN",
            "referrerPolicy": "strict-origin-when-cross-origin",
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": "nosniff",
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "216.246.46.153",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://datanubia.com"
            ]
        },
        "linked_pages": {
            "external": [
                "https://www.datanubia.com/blog"
            ],
            "external_count": 1,
            "internal_count": 36
        },
        "whois": {
            "registrar": "NameCheap, Inc.",
            "created": "2026-10-18T03:46:28Z",
            "updated": "2026-10-18T03:48:39Z",
            "expires": "2027-10-18T03:46:28Z",
            "status": [
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "ns8940.banahosting.com",
                "ns8941.banahosting.com"
            ]
        },
        "headers": {
            "headers": {
                "content-type": "text/html; charset=UTF-8",
                "x-frame-options": "SAMEORIGIN",
                "x-content-type-options": "nosniff",
                "referrer-policy": "strict-origin-when-cross-origin"
            }
        }
    }
}
```