video-lezione[.]it

This domain is flagged for hosting a fake educational login phishing scheme targeting users under the guise of online lessons. Analysis indicates the infrastructure was designed to harvest credentials by impersonating legitimate e-learning platforms, with the page titled 'Lezione pratica' to appear authentic. The threat type aligns with generic phishing but exhibits characteristics of brand impersonation, specifically mimicking educational services to exploit user trust. Infrastructure analysis reveals the domain video-lezione.it resolves to IP 172.67.149.118, hosted on Cloudflare’s network (AS13335). It was registered through InterNetX GmbH on February 21, 2026, an unusually future-dated creation that may indicate domain spoofing or backdating. VirusTotal reports 15 out of 95 security vendors flagging the domain as malicious, while it appears on one security blocklist. The SSL certificate is issued by Google Trust Services (WE1), a common tactic to lend false legitimacy. The domain is currently offline, but its prior activity and detection rates warrant elevated risk classification. Mitigation steps for users who may have interacted with this domain include immediate password resets for any accounts accessed during the exposure window, particularly those tied to educational or professional services. Administrators should block the domain and associated IP (172.67.149.118) at the network level to prevent further access. Users are advised to verify the legitimacy of e-learning platforms by cross-referencing official institution URLs and enabling multi-factor authentication to mitigate credential theft risks. Future vigilance is recommended for domains registered through InterNetX GmbH with similar naming conventions or Cloudflare-hosted infrastructure.