diverbox[.]com[.]pe

The domain diverbox.com.pe was created on February 21, 2026 and is registered through NIC.PE. Its authoritative name servers are ns1.supercp.com, ns2.supercp.com, ns3.supercp.com, and ns4.supercp.com. DNS resolution points to the IP address 106.0.62.94, which is advertised as part of AS55293 operated by A2 Hosting, Inc. and geolocated to the United States. The web service presents an HTTP 200 response and is hosted on an Apache HTTP Server with PHP support and HTTP Strict Transport Security (HSTS) enabled.

A Let’s Encrypt certificate (R12) secures the site, indicating that TLS is in use. VirusTotal analysis shows that 11 of 93 security vendors have flagged the domain as malicious, and the domain appears on two independent blocklists, PhishDestroy and Enkrypt, confirming its classification as a social media phishing campaign. The Gridinsoft trust score is 0 out of 100, reinforcing the low reputation. The current operational status is listed as offline, suggesting that the site has been taken down or is otherwise inaccessible at the time of reporting.

No additional evidence such as page titles, brand references, or payload details is available, leaving the specific phishing content unverified. Defenders should block the domain and its associated IP address, add it to local and network‑wide threat‑intel feeds, and monitor for any re‑hosting attempts or related infrastructure. Updating intrusion‑detection signatures to reflect the observed Apache/PHP stack and the Let’s Encrypt certificate fingerprint may improve detection of similar campaigns. Continuous re‑assessment is advised, as the offline status could change if the operators redeploy the site on a different host or domain.