nauticacentro[.]com

Analysis indicates that the domain nauticacentro.com is currently active and classified as a high‑risk generic phishing site. The domain was created on 12 June 2018 and continues to resolve to the IP address 159.198.36.123, which is allocated to AS22612 operated by Namecheap, Inc. The web server returns HTTP 200 and presents a page titled “Centro de Educación Náutica Mercante”, suggesting an attempt to impersonate a maritime education institution.

Infrastructure inspection shows that the domain uses a Let’s Encrypt R13 certificate, providing TLS encryption but offering no indication of legitimate ownership. Authoritative nameservers are ns1.nauticacentro.com and ns2.nauticacentro.com, both hosted on the same provider. Registration was performed through NameSilo, LLC, and no privacy protection appears to be in place, allowing direct correlation of the domain to the hosting account.

Threat intelligence sources corroborate the malicious classification. AlienVault OTX references the domain in four separate pulses, and the site appears on the PhishDestroy blocklist. Gridinsoft assigns a trust score of 0 out of 100, and VirusTotal records three positive detections out of ninety‑five scanners, reinforcing the presence of malicious components. The observed page content and the use of a reputable TLS certificate are typical of credential‑harvesting campaigns that rely on user trust.

Defenders should block nauticacentro.com at the network perimeter and update email security gateways to reject URLs referencing this host. Continuous monitoring of DNS queries for the domain and its associated nameservers is advised, as well as the use of threat‑intelligence feeds that include the OTX pulses and blocklist entries. Organizations should also educate users about unsolicited communications that reference nautical education services, emphasizing verification of legitimate sources before credential submission.