scuba-steve[.]com
“AlgorynMunt Group”
Resumen de las pruebas
Analysis shows that www.scuba-steve.com was registered on February 21, 2026 and is presently taken offline. The domain resolves to IP address 143.204.194.29, which belongs to Amazon's AS16509 infrastructure and is geolocated in France. The TLS certificate presented is an Amazon RSA 2048 M01 certificate issued via AWS Certificate Manager, confirming the use of Amazon Web Services for hosting. Underlying server software includes Ubuntu, Nginx, and a Vue.js front‑end, with static assets served through Unpkg and distribution via Amazon CloudFront.
Nameserver delegation points to a2.share-dns.com and b2.share-dns.net, indicating the use of a shared DNS service. The page title returned from the site is "AlgorynMunt Group," suggesting the site attempts to masquerade as that entity, although no further brand evidence is present. Security telemetry indicates the domain appears on a single security blocklist and has been blocked by PhishDestroy. Gridinsoft assigns a trust score of 0 out of 100, reflecting a high risk perception.
VirusTotal scanning recorded a single positive detection out of 93 vendor engines, reinforcing the suspicion of malicious intent. Defenders should immediately block the domain and its associated IP at perimeter defenses, update URL filtering policies, and add the domain to internal blocklists. Continuous monitoring of the IP range and ASN for new domains using similar technology stacks is advised, as the infrastructure pattern—AWS hosting with shared DNS and low‑trust scores—has been observed in other phishing campaigns. Incident response teams should also review any outbound traffic logs for connections to 143.204.194.29 and correlate with user reports to identify potential exposure before the site was taken offline.
Data Coverage
Proceso de respuesta ante amenazas Pipeline
Cobertura de listas de bloqueo
10 fuentes externas supervisadas · instantánea del 11/08/2026
10 fuentes externas supervisadas Sin coincidencias
Captura guardada
Inteligencia de dominios
Detalles técnicosDNS, nombres TLS y marcas de tiempo
ICANN OVERSIGHT
Acreditación y contexto RAA
Acreditación y contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Análisis de VirusTotal
Análisis del rendimiento del sitio
Google PageSpeed Insights — mobile performance audit of scuba-steve.com · checked Mar 2, 2026
¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.