scudalia[.]net

The domain scudalia.net was registered on February 21, 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com and is currently listed as offline. DNS resolution points to IP address 104.21.79.100, which is hosted by Cloudflare (AS13335) in the United States. The authoritative nameservers are aarav.ns.cloudflare.com and lily.ns.cloudflare.com, indicating the use of Cloudflare’s DNS and CDN services. TLS termination is provided by a Google Trust Services certificate identified as WE1, and the site enforces HTTP Strict Transport Security (HSTS) while supporting HTTP/3, confirming modern web security configurations.

Security assessments show a Gridinsoft trust score of 0 out of 100, and the domain appears on a single security blocklist, specifically PhishDestroy. VirusTotal analysis indicates that 4 of 93 scanning engines flagged the domain, reinforcing the suspicion of malicious intent. The page title returned from the site, "Scudalia - Piattaforma Ufficiale | Trading IA 2025 | Oltre 10.000 Recensioni," suggests a financial‑oriented landing page, yet no further content has been captured for analysis.

The threat classification is a brand impersonation campaign targeting the brand "base," as indicated by the supplied intelligence. While the exact nature of the impersonation (e.g., credential harvesting, fraud) cannot be confirmed without additional page content, the combination of a recent registration, low trust score, blocklist presence, and partial VirusTotal detections aligns with typical infrastructure used in brand‑spoofing operations.

Defensive actions should include adding scudalia.net to DNS and proxy blocklists, monitoring Cloudflare‑associated IP ranges for re‑use of the same address, and flagging any future resolutions of the domain for immediate quarantine. Security teams should also watch for similarly structured domains that employ the same registrar or nameserver pattern, as threat actors often register multiple look‑alike domains in quick succession.