Is mail.steamboatcarsandcoffee.org safe?

No. MalwareAnalyzer scanned mail.steamboatcarsandcoffee.org on 19 Aug 2026 and returned a malicious verdict with a score of 100 out of 100, categorised as phishing. Treat it as hostile until it is re-checked.

How was mail.steamboatcarsandcoffee.org checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

mail.steamboatcarsandcoffee.org - malicious URL scan, 19 Aug 2026

MalwareAnalyzer by Cyble scanned mail.steamboatcarsandcoffee.org and returned a malicious verdict (score 100), categorised as phishing. The page resolved to 162.244.93.81 on Webhosting Holdings LLC in US. The domain was registered 1192 days ago through NameCheap, Inc.. 1 domain and 1 IP were contacted, over 20 HTTP requests. This is a point-in-time observation from 19 Aug 2026; the page may have changed since.

Scan result

Verdict: malicious (score 100) · Confidence 100%
Scanned URL: https://mail.steamboatcarsandcoffee.org/interface/root
Domain: mail.steamboatcarsandcoffee.org · IP: 162.244.93.81 · AS46824 · US
Server: nginx/1.22.1
HTTP status: 200 · text/html; charset=utf-8
Registrar: NameCheap, Inc. · domain age 1192 days · created 2023-05-15
TLS issuer: C=US, O=Let's Encrypt, CN=YE2 · valid to Nov 17 16: · subject CN=mail.steamboatcarsandcoffee.org
HTTP requests captured: 20 · outgoing links: 1
Scan tier: standard · observed 2026-08-19 19:44:28 UTC

Antivirus & YARA (3 of 47 engines)

YARA: delivr.to detections [yara]: DLV_HTML_Smuggling (page content)
YARA: JPCERT/CC [yara]: JPCERT_LODEINFO (page content)
YARA: SophosLabs IoCs (public) [yara]: SOPHOS_Gootloader_JS (page content)

Why this verdict

3 antivirus/YARA engines flagged the page content: JPCERT_LODEINFO, SOPHOS_Gootloader_JS, DLV_HTML_Smuggling
Domain impersonates steam (combosquat)
Certificate issued < 48h ago

Detected technologies

Nginx

Contacted infrastructure

162.244.93.81 - AS46824 Webhosting Holdings LLC (United States)

Observed indicators

mail.steamboatcarsandcoffee.org
162.244.93.81
https://mail.steamboatcarsandcoffee.org/interface/root
https://mail.steamboatcarsandcoffee.org/favicon.ico
https://mail.steamboatcarsandcoffee.org/interface/output/fonts/roboto/roboto.css
https://mail.steamboatcarsandcoffee.org/interface/output/login-v-639096288240000000.min.css
https://mail.steamboatcarsandcoffee.org/interface/output/fonts/font-awesome/css/font-awesome.css
https://mail.steamboatcarsandcoffee.org/interface/output/angular-v-639096288240000000.js
https://mail.steamboatcarsandcoffee.org/interface/output/vendor-v-639096288240000000.js
https://mail.steamboatcarsandcoffee.org/interface/output/site-v-639096288240000000.js
https://mail.steamboatcarsandcoffee.org/interface/output/site-v-639096288240000000.templates.js

Questions about mail.steamboatcarsandcoffee.org

Is mail.steamboatcarsandcoffee.org safe?: No. MalwareAnalyzer scanned mail.steamboatcarsandcoffee.org on 19 Aug 2026 and returned a malicious verdict with a score of 100 out of 100, categorised as phishing. Treat it as hostile until it is re-checked.
How was mail.steamboatcarsandcoffee.org checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of mail.steamboatcarsandcoffee.org

Scanned on MalwareAnalyzer by Cyble · Open interactive scan