scuba-steve[.]com
“AlgorynMunt Group”
Ringkasan bukti
Analysis shows that www.scuba-steve.com was registered on February 21, 2026 and is presently taken offline. The domain resolves to IP address 143.204.194.29, which belongs to Amazon's AS16509 infrastructure and is geolocated in France. The TLS certificate presented is an Amazon RSA 2048 M01 certificate issued via AWS Certificate Manager, confirming the use of Amazon Web Services for hosting. Underlying server software includes Ubuntu, Nginx, and a Vue.js front‑end, with static assets served through Unpkg and distribution via Amazon CloudFront.
Nameserver delegation points to a2.share-dns.com and b2.share-dns.net, indicating the use of a shared DNS service. The page title returned from the site is "AlgorynMunt Group," suggesting the site attempts to masquerade as that entity, although no further brand evidence is present. Security telemetry indicates the domain appears on a single security blocklist and has been blocked by PhishDestroy. Gridinsoft assigns a trust score of 0 out of 100, reflecting a high risk perception.
VirusTotal scanning recorded a single positive detection out of 93 vendor engines, reinforcing the suspicion of malicious intent. Defenders should immediately block the domain and its associated IP at perimeter defenses, update URL filtering policies, and add the domain to internal blocklists. Continuous monitoring of the IP range and ASN for new domains using similar technology stacks is advised, as the infrastructure pattern—AWS hosting with shared DNS and low‑trust scores—has been observed in other phishing campaigns. Incident response teams should also review any outbound traffic logs for connections to 143.204.194.29 and correlate with user reports to identify potential exposure before the site was taken offline.
Data Coverage
Alur Tanggapan Ancaman Pipeline
Cakupan daftar blokir
10 sumber eksternal dipantau · snapshot tersimpan 11/08/2026
Tangkapan tersimpan
Intelijen Domain
Detail teknisDNS, nama TLS, dan stempel waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisis VirusTotal
Analisis Performa Situs
Google PageSpeed Insights — mobile performance audit of scuba-steve.com · checked Mar 2, 2026
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive