esanraxo-530btc[.]it

Analysis of the domain esanraxo-530btc.it shows that it is currently active and serving HTTP status code 301, indicating a permanent redirect. The domain has been observed by six of ninety‑one security vendors on VirusTotal, which signals malicious intent consistent with a phishing‑related operation. It is listed on a single external blocklist and is actively blocked by PhishDestroy, reinforcing the assessment that the site is being used for illicit credential harvesting.

No additional infrastructure details such as registrar, IP address, ASN, hosting provider, or SSL certificate information have been disclosed in the available intelligence, leaving the broader hosting profile uncharacterized. The page title and any brand‑specific references have not been published, so the exact lure employed by the site cannot be confirmed at this time. The combination of a redirect response, multi‑vendor detection, and inclusion on a phishing‑focused blocklist is sufficient to classify the domain as a high‑risk phishing vector.

Defenders should add esanraxo-530btc.it to network‑level deny lists, enforce URL filtering, and monitor DNS queries for lookups to this name. Continuous re‑evaluation is advised, as further crawling or sandbox analysis may reveal additional payloads, credential‑stealing forms, or affiliate redirects. Until more detailed content is harvested, the recommended mitigation is to block the domain at the perimeter and alert endpoint protection solutions to treat any connections as malicious.