# PhishDestroy domain threat record: divepeds.com Content language: English Canonical HTML report: https://phishdestroy.io/domain/divepeds.com/ Machine-readable companion: https://phishdestroy.io/domain/divepeds.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-25 08:25:16 UTC - Last availability or vendor check: 2026-10-27 23:02:25 UTC - Stored record updated: 2026-10-27 23:22:12 UTC - VirusTotal detections in the stored snapshot: 4/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 217.160.0.250 - Registrar in stored WHOIS data: IONOS SE - Registrar country in stored WHOIS data: DE - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2008-12-18 08:13:54 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a17244-3e70-76cd-b881-c219a88a8096/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/divepeds.com - Certificate Transparency search: https://crt.sh/?q=%25.divepeds.com - Web Archive lookup: https://web.archive.org/web/*/https://divepeds.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy added divepeds.com to its internal blocklist on 2026-10-25 after intake flagged multiple VirusTotal detections. The site returned an HTTP 200 response on the same day and the recorded page title reads "OTB - Orthopädie Technik Bauche GmbH". No concrete phishing or fraud behavior was observed in the fetched content. How the scam works The listing reflects automated detections of potential risk rather than observed theft or fraud. Without observed forms, redirects to malicious pages, or wallet interactions, the exact mechanism remains unconfirmed. Evidence VirusTotal reported four malicious detections from alphaMountain.ai, Gridinsoft, VIPRE and Webroot on the analysis performed 2026-10-10 (retrieved 2026-10-25). Google Safe Browsing checked on 2026-10-25 did not flag the domain. Two urlscan.io captures exist: a 2026-07-28 scan marked the page clean, while a 2026-10-25 scan gave a malicious engine score of 68 but an overall non‑malicious verdict. OTX listed four pulses mentioning the domain as of 2026-10-25. PhishDestroy’s internal blocklist marks the domain as suspicious, while external blocklists returned zero hits on the check date. Infrastructure The domain was registered on 2008-12-18 through IONOS SE and is set to expire on 2026-12-18. On 2026-10-25 the recorded A record pointed to 217.160.0.250 and the AAAA record to 2001:8d8:100f:f000::2fd. A TLS certificate for *.divepeds.com issued by Sectigo was valid from 2026-05-29 to 2026-12-09. What to do Treat divepeds.com as potentially risky and avoid entering credentials, personal data or cryptocurrency information on the site. Organizations should block the domain at the network perimeter and monitor logs for any access attempts. Users who may have interacted with the site should review account activity and change passwords if credentials were submitted. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a17244-3e70-76cd-b881-c219a88a8096/ Cloudflare Radar report: https://radar.cloudflare.com/scan/1d4c3a2a-4cce-41aa-9131-12b630445fec Stored capture screenshot: https://i.ibb.co/cShWK0nn/d5e5762c0eae.png Cloudflare Radar screenshot (2026-10-25T08:35:47Z): https://screenshots.phishdestroy.io/cf/1d4c3a2a-4cce-41aa-9131-12b630445fec.png VirusTotal report: https://www.virustotal.com/gui/domain/divepeds.com Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=divepeds.com Archived copy: https://web.archive.org/web/20261025082746/https://divepeds.com/ Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-25 09:20:31 UTC ## Stored page captures - Primary capture: https://i.ibb.co/cShWK0nn/d5e5762c0eae.png Captured: 2026-10-25 08:55:30 UTC - URLScan capture 1: https://screenshots.phishdestroy.io/01a17244-3e70-76cd-b881-c219a88a8096.png Captured: 2026-10-25 08:55:30 UTC Source report: https://urlscan.io/result/01a17244-3e70-76cd-b881-c219a88a8096/ - URLScan capture 2: https://urlscan.io/screenshots/019fa862-ef19-7746-9a4b-fc2d8dfa2b08.png Captured: 2026-10-25 08:25:16 UTC Source report: https://urlscan.io/result/01a17244-3e70-76cd-b881-c219a88a8096/ - URLScan · 2026-10-25: https://screenshots.phishdestroy.io/us/01a17238-615b-7222-8189-9160474be9ca.png Captured: 2026-10-25 08:41:05 UTC Source report: https://urlscan.io/result/01a17238-615b-7222-8189-9160474be9ca/ SHA-256: 2c0155cd4dd00584e8e68a16acf16f5718a24977742e126decaf00121e91e50b - URLScan · 2026-10-25: https://screenshots.phishdestroy.io/us/01a17239-4b9a-753f-af03-c0306c94f3a7.png Captured: 2026-10-25 08:42:16 UTC Source report: https://urlscan.io/result/01a17239-4b9a-753f-af03-c0306c94f3a7/ SHA-256: 2c0155cd4dd00584e8e68a16acf16f5718a24977742e126decaf00121e91e50b - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/1d4c3a2a-4cce-41aa-9131-12b630445fec.png Captured: 2026-10-25 08:35:47 UTC Source report: https://radar.cloudflare.com/scan/1d4c3a2a-4cce-41aa-9131-12b630445fec SHA-256: c33364eaf8ddb20da30f3c910b8307f609eebe7d3f2b1735c47b7b1d6a3f7cbf - URLQuery: https://screenshots.phishdestroy.io/uq/0feaf489-5d58-4146-98ab-2c50d11a881f.png Source report: https://urlquery.net/report/0feaf489-5d58-4146-98ab-2c50d11a881f SHA-256: 3001d668616f31f48b9a7b98f2ab974439d614acf31c43cb506f458abcf645b1 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-25T09:16:36Z", "uuid": "01a17244-3e70-76cd-b881-c219a88a8096", "scanned_at": "2026-10-25T08:54:03Z", "final_url": "https://divepeds.com/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://divepeds.com/", "from": "http://divepeds.com/", "status": 307 } ], "ip": "217.160.0.250", "ptr": "217-160-0-250.elastic-ssl.ui-r.com", "ips": [ "217.160.0.250" ], "asns": [ "8560" ], "countries": [ "DE" ], "link_domains": [ "ot-bauche.de" ], "doc_hash": "04d05978fdb111358073ab0524e5c1fafc0826615c206987618416b8bd8a4747", "domain_age_days": 1348, "apex_age_days": 1348, "tls_age_days": 149, "tls_valid_days": 194, "requests": 12, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 68, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "content-type": "image/png" } }, "cf": { "v": 1, "fetched_at": "2026-10-25T08:38:49Z", "uuid": "1d4c3a2a-4cce-41aa-9131-12b630445fec", "scanned_at": "2026-10-25T08:35:47Z", "final_url": "https://divepeds.com/", "status": 200, "history": [ { "url": "https://divepeds.com/", "status": 200 } ], "dom_hash": "b65f77ec53fbd56f77a08ca4174deda15bf3784e44773cf04181a145e4b0c1d0", "doc_hash": "997b550223b2d10a4e9cdfa6a102e290e7affb00e491b888333667bf6bbd01bc", "domain_risks": [ "Health & Fitness", "Health" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "divepeds.com", "type": "A", "value": "217.160.0.250" }, { "name": "divepeds.com", "type": "AAAA", "value": "2001:8d8:100f:f000::2fd" } ], "dnssec_valid": false, "ip": "217.160.0.250", "whois": { "registrar": "IONOS SE", "created": "2008-12-18T09:13:54Z", "updated": "2025-12-19T08:09:30Z", "expires": "2026-12-18T09:13:54Z", "nameservers": [ "ns1029.ui-dns.de", "ns1045.ui-dns.org", "ns1078.ui-dns.com", "ns1119.ui-dns.biz" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-25T09:13:53Z", "analysis_at": "2026-10-10T14:32:49Z", "stats": { "timeout": 0, "harmless": 54, "malicious": 4, "suspicious": 0, "undetected": 34 }, "detections": { "VIPRE": "phishing", "Webroot": "malicious", "Gridinsoft": "phishing", "alphaMountain.ai": "phishing" }, "reputation": 0, "created": "2008-12-18T00:00:00Z", "updated": "2025-12-19T00:00:00Z", "first_seen": "2025-06-12T12:59:16Z", "dns": [ { "ttl": 3600, "type": "MX", "value": "mx00.ionos.de", "priority": 10 }, { "ttl": 21600, "type": "NS", "value": "ns1078.ui-dns.com" }, { "ttl": 3600, "type": "MX", "value": "mx01.ionos.de", "priority": 10 }, { "ttl": 3600, "type": "AAAA", "value": "2001:8d8:100f:f000::2fd" }, { "ttl": 21600, "type": "NS", "value": "ns1119.ui-dns.biz" }, { "ttl": 3600, "type": "TXT", "value": "v=spf1 include:_spf-eu.ionos.com ~all" }, { "ttl": 21600, "type": "NS", "value": "ns1029.ui-dns.de" }, { "ttl": 3600, "type": "A", "value": "217.160.0.250" }, { "ttl": 21600, "type": "SOA", "rname": "hostmaster.1und1.de", "value": "ns1045.ui-dns.org" }, { "ttl": 21600, "type": "NS", "value": "ns1045.ui-dns.org" } ], "dns_at": "2026-10-10T14:33:48Z", "jarm": "29d29d00029d29d00042d42d0000002059a3b916699461c5923779b77cf06b", "cert": { "san": [ "*.divepeds.com", "divepeds.com" ], "issuer": "Sectigo Limited / Sectigo Public Server Authentication CA DV R36", "serial": "18c23fc11cf7fcde85240388618b6006", "sha256": "583897ec4be49d866ce4309efcdafa8cb2afe1faedbae8081b501b44d3e9d438", "subject": "*.divepeds.com", "valid_to": "2026-12-09T23:59:59Z", "valid_from": "2026-05-29T00:00:00Z" }, "rdap": { "status": [ "client transfer prohibited" ], "events": { "last changed": "2018-10-05T22:41:46Z", "registration": "2008-12-18T09:13:54Z", "registrar expiration": "2026-12-18T09:13:54Z", "last update of RDAP database": "2026-10-10T14:33:47Z" }, "registrar": "IONOS SE", "registrar_iana_id": "83" } }, "webcheck": { "v": 1, "fetched_at": "2026-10-25T08:39:00Z", "mail_config": { "mx": [ "mx00.ionos.de", "mx01.ionos.de" ], "spf": "v=spf1 include:_spf-eu.ionos.com ~all", "dmarc": true, "spf_lookups": 1 }, "caa_records": { "domain": "divepeds.com" }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "archives": { "last": "2026-10-25T08:27:46Z", "first": "2011-02-03T01:15:20Z", "changes": 3, "days_archived": 18, "scans_per_day": 0, "avg_page_bytes": 923 }, "social_tags": { "title": "OTB - Orthopädie Technik Bauche GmbH", "author": "o2internetdesign.de", "keywords": "otb,orthopaedie,klinikum,neustadt,heilmittel,physiotherapie,orthesen,prothesen,prothetik,orthetik,bandagen,sportartikel,myoelektrisch", "description": "OTB - Orthopädie Technik Bauche GmbH" }, "trackers": { "requests": 9 }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 200, "timings": { "dns": 5, "tls": 21, "wait": 14, "connect": 12, "download": 0 }, "response_ms": 52 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443 ] }, "carbon": { "bytes": 2945, "co2_grams": 0.0001, "cleaner_than": 95 }, "dns_server": { "ns": [ { "ip": "185.132.35.45", "host": "ns1045.ui-dns.org" }, { "ip": "185.132.34.78", "host": "ns1078.ui-dns.com" }, { "ip": "185.132.32.29", "host": "ns1029.ui-dns.de" }, { "ip": "185.132.33.119", "host": "ns1119.ui-dns.biz" } ], "zone": "divepeds.com" }, "location": { "ip": "2001:8d8:100f:f000::2fd", "asn": "8560", "org": "IONOS SE", "country": "DE" }, "ssl": { "issuer": "Sectigo Limited / Sectigo Public Server Authentication CA DV R36", "subject": "*.divepeds.com" }, "dns": { "A": [ "217.160.0.250" ], "MX": [ "{\"exchange\": \"mx00.ionos.de\", \"priority\": 10}", "{\"exchange\": \"mx01.ionos.de\", \"priority\": 10}" ], "NS": [ "ns1078.ui-dns.com", "ns1029.ui-dns.de", "ns1045.ui-dns.org", "ns1119.ui-dns.biz" ], "SOA": "{\"nsname\": \"ns1045.ui-dns.org\", \"hostmaster\": \"hostmaster.1und1.de\", \"serial\": 2017061415, \"refresh\": 28800, \"retry\": 7200, \"expire\": 604800, \"minttl\": 300}", "TXT": [ "v=spf1 include:_spf-eu.ionos.com ~all" ], "AAAA": [ "2001:8d8:100f:f000::2fd" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "2001:8d8:100f:f000::2fd", "family": 6 }, "redirects": { "chain": [ "https://divepeds.com" ] }, "linked_pages": { "external": [ "http://ot-bauche.de/impressum.html" ], "external_count": 1, "internal_count": 1 }, "whois": { "registrar": "IONOS SE", "created": "2008-12-18T09:13:54Z", "updated": "2025-12-19T08:09:30Z", "expires": "2026-12-18T09:13:54Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "ns1029.ui-dns.de", "ns1045.ui-dns.org", "ns1078.ui-dns.com", "ns1119.ui-dns.biz" ] }, "headers": { "headers": { "server": "Apache", "content-type": "text/html" } } } } ```