amtekmarineconsults[.]com

Analysis of amtekmarineconsults.com shows a high‑risk brand‑impersonation infrastructure that remains active as of July 12 2026. The domain was registered on August 22 2024 through Atak Domain and resolves to the IP address 198.12.93.82, which is hosted in the United States under ASN 36352 (HostPapa). The site presents a valid HTTPS certificate issued by Let’s Encrypt (R12) and returns HTTP 200, indicating a functional web server. Technical fingerprints reveal a WordPress stack backed by MySQL and PHP, served via LiteSpeed, with client‑side libraries including jQuery and Google Analytics, and support for HTTP/3. The page title reads “Amtek Marine Consults,” but the domain is flagged for cryptocurrency‑related scams and is listed as impersonating the brand “base.” Security telemetry shows the domain appears on one blocklist, is blocked by PhishDestroy, and received a single positive detection from VirusTotal (1 of 95 scanners). Gridinsoft assigns a trust score of 0 / 100, reinforcing the malicious assessment. While the exact phishing content has not been publicly disclosed, the convergence of registration details, hosting profile, low trust score, and detection signals warrants immediate defensive action. Organizations should add the domain and its resolving IP to deny‑list rules, monitor DNS queries for related nameservers (NS551.REDSERVERHOST.COM, NS552.REDSERVERHOST.COM), and continue to observe any changes in detection status. Further investigation is recommended to capture any payloads or credential‑harvesting pages that may be deployed behind the current WordPress front‑end.