# PhishDestroy domain threat record: andes-rendivo-italy.com

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/andes-rendivo-italy.com/
Machine-readable companion: https://phishdestroy.io/domain/andes-rendivo-italy.com/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-21 02:18:16 UTC
- Last availability or vendor check: 2026-10-21 10:50:04 UTC
- Stored record updated: 2026-10-21 16:07:58 UTC
- VirusTotal detections in the stored snapshot: 16/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored classification

- Targeted brand: ethereum

## Stored infrastructure

- Observed IP address: 104.21.52.196
- Registrar in stored WHOIS data: Dynadot Inc
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-07-14 07:15:35 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a15c4f-9bae-7678-aeda-9b43c7ee9ec7/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/andes-rendivo-italy.com
- Certificate Transparency search: https://crt.sh/?q=%25.andes-rendivo-italy.com
- Web Archive lookup: https://web.archive.org/web/*/https://andes-rendivo-italy.com/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy listed andes-rendivo-italy.com as a suspicious domain because multiple security‑vendor scans flagged it as malicious or phishing. The recorded page title is “Andes Rendivo | Piattaforma Digitale per una Navigazione Più Intuitiva 2026”. PhishDestroy first observed the domain on 2026-10-21 and recorded an HTTP 200 response on that date.

How the scam works
The classification relies on vendor detections of phishing or malware, but no malicious payload or credential‑harvesting page was observed. In general, domains flagged this way can be used to lure users to enter credentials, download unwanted software, or impersonate legitimate services, though such activity has not been confirmed for this site.

Evidence
VirusTotal scanned the domain on 2026-10-12 (retrieved 2026-10-21) and reported 13 malicious and 3 suspicious detections across 92 engines, for a total of 16 detections. Google Safe Browsing checked the domain on 2026-10-21 and did not flag it. urlscan captured the site on 2026-09-12; its overall verdict was clean, while its engine analysis marked it malicious with a high confidence score, and Cloudflare Radar on 2026-10-21 classified the domain as phishing and malware. OTX listed one pulse referencing the domain on 2026-10-21, and PhishDestroy’s internal blocklist includes the domain while external blocklists showed no matches as of 2026-10-21.

Infrastructure
The domain was registered with Dynadot Inc on 2026-07-14. DNS resolution at the time of checking returned the IP 104.21.52.196, which belongs to Cloudflare, Inc. and is recorded in Canada. The site was observed to run Python/Django behind Cloudflare’s WAF and uses libraries such as jsDelivr and Google Font API.

What to do
Visitors should avoid entering credentials, downloading files, or granting any permissions on this site; if any information was entered, change the associated passwords and monitor accounts for unusual activity. Network defenders should add the exact domain to block lists, review logs for connections to 104.21.52.196, and keep PhishDestroy’s feed updated.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a094f1-6f1d-742c-841b-9e485fb52359/
VirusTotal report: https://www.virustotal.com/gui/domain/andes-rendivo-italy.com
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=andes-rendivo-italy.com
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-21 02:28:16 UTC

## Stored page captures

- Primary capture: https://urlscan.io/screenshots/01a15c4f-9bae-7678-aeda-9b43c7ee9ec7.png
  Captured: 2026-10-21 02:36:44 UTC
- URLScan capture: https://screenshots.phishdestroy.io/01a094f1-6f1d-742c-841b-9e485fb52359.png
  Captured: 2026-10-21 02:18:16 UTC
  Source report: https://urlscan.io/result/01a15c4f-9bae-7678-aeda-9b43c7ee9ec7/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/1b3e0d1c-340d-474a-b5b4-be230730d7ff.png
  Captured: 2026-10-21 02:23:56 UTC
  Source report: https://radar.cloudflare.com/scan/1b3e0d1c-340d-474a-b5b4-be230730d7ff
  SHA-256: 746f1249d2ffdb6269bbe492c91d6f7d6b12d293df91bb0901dc89b0b713bd85
- URLQuery: https://screenshots.phishdestroy.io/uq/ce7e5e00-41ca-478d-bc74-82a8fafd769e.png
  Source report: https://urlquery.net/report/ce7e5e00-41ca-478d-bc74-82a8fafd769e
  SHA-256: d181b1a02e6fa39cc4594670d2bdba603c50862a567e6026b2a828fae9b354c2
- URLScan · 2026-09-11: https://screenshots.phishdestroy.io/us/01a09192-ce76-726d-8db4-ede3d98e6673.png
  Captured: 2026-09-11 17:45:20 UTC
  Source report: https://urlscan.io/result/01a09192-ce76-726d-8db4-ede3d98e6673/
  SHA-256: 57f2642b3c9d3541b711f524b334f0f37d5b9d165ba62c2f1f0087515f8c21ef
- URLScan · 2026-09-12: https://screenshots.phishdestroy.io/us/01a094f1-6f1d-742c-841b-9e485fb52359.png
  Captured: 2026-09-12 09:27:31 UTC
  Source report: https://urlscan.io/result/01a094f1-6f1d-742c-841b-9e485fb52359/
  SHA-256: c2927c323bb452c8c5fe9f42574f6a8c5cd22b7b45843f9407449f682d52d72b
- URLScan · 2026-10-21: https://screenshots.phishdestroy.io/us/01a15c57-6ca9-715d-9ae0-fbbfec54e121.png
  Captured: 2026-10-21 02:43:23 UTC
  Source report: https://urlscan.io/result/01a15c57-6ca9-715d-9ae0-fbbfec54e121/
  SHA-256: 31ba6d9268f6035338544b1ee206f254a611ef400236e5d5379ac5ee5b9a43ec

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-21T03:47:05Z",
        "uuid": "01a15c4f-9bae-7678-aeda-9b43c7ee9ec7",
        "scanned_at": "2026-10-21T02:34:56Z",
        "final_url": "https://andes-rendivo-italy.com/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://andes-rendivo-italy.com/",
                "from": "http://andes-rendivo-italy.com/",
                "status": 307
            }
        ],
        "ip": "172.67.203.58",
        "domains": [
            "cdn.jsdelivr.net",
            "cdnjs.cloudflare.com",
            "modernroomdesigns.com",
            "static.cloudflareinsights.com",
            "fonts.googleapis.com"
        ],
        "ips": [
            "104.17.208.5",
            "172.67.222.66",
            "2606:4700::6810:5049",
            "104.17.24.14",
            "2606:4700::6811:d005",
            "2404:6800:4006:80a::200a",
            "172.67.203.58"
        ],
        "asns": [
            "13335",
            "15169"
        ],
        "countries": [
            "US",
            "AU"
        ],
        "doc_hash": "8bb24526455a603f724e676a4f25d3ac34485658bc5239e54affe5d05b187820",
        "script_hashes": [
            "4082edfaa0f4837bfa6ea5de436af8c395b7f6c65db26b87d2978143aab01885"
        ],
        "globals": [
            "polylang",
            "_language",
            "_loader",
            "GEO_API_URL",
            "_phone_error",
            "_form_unknown_error",
            "__offerChatWidgetMounted",
            "intlTelInput",
            "__cfBeacon"
        ],
        "cookies": [
            "_subid",
            "csrftoken"
        ],
        "tls": {
            "san": [
                "andes-rendivo-italy.com",
                "*.andes-rendivo-italy.com"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "WE1",
            "subject": "andes-rendivo-italy.com",
            "protocol": "QUIC",
            "valid_to": "2026-12-10T11:29:03Z",
            "valid_from": "2026-09-11T10:30:28Z"
        },
        "domain_age_days": 98,
        "apex_age_days": 98,
        "tls_age_days": 39,
        "tls_valid_days": 90,
        "requests": 14,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 99,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "cloudflare",
            "content-type": "text/html; charset=utf-8",
            "x-frame-options": "DENY",
            "x-content-type-options": "nosniff",
            "referrer-policy": "same-origin",
            "cross-origin-opener-policy": "same-origin"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-21T02:27:32Z",
        "uuid": "1b3e0d1c-340d-474a-b5b4-be230730d7ff",
        "scanned_at": "2026-10-21T02:23:56Z",
        "final_url": "https://andes-rendivo-italy.com/",
        "status": 200,
        "history": [
            {
                "url": "https://andes-rendivo-italy.com/",
                "status": 200
            }
        ],
        "dom_hash": "86a03739eb04f006ac97debe0d6fc32d004b2d39f9eab809e6e3db37dba97e6f",
        "doc_hash": "b0d2471df6cf214c572c6da5c714e14e658629bf1bfe7501b62ee8555875eea9",
        "phishing_v2": [
            "phishing"
        ],
        "domain_risks": [
            "Malware",
            "Security threats",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "andes-rendivo-italy.com",
                "type": "A",
                "value": "104.21.52.196"
            },
            {
                "name": "andes-rendivo-italy.com",
                "type": "A",
                "value": "172.67.203.58"
            },
            {
                "name": "andes-rendivo-italy.com",
                "type": "AAAA",
                "value": "2606:4700:3032::6815:34c4"
            },
            {
                "name": "andes-rendivo-italy.com",
                "type": "AAAA",
                "value": "2606:4700:3035::ac43:cb3a"
            }
        ],
        "dnssec_valid": false,
        "ip": "104.21.52.196",
        "verdict": {
            "tags": [
                "malware"
            ],
            "malicious": true,
            "categories": [
                "malware"
            ]
        },
        "whois": {
            "registrar": "Dynadot Inc",
            "created": "2026-07-14T09:15:35Z",
            "updated": "2026-07-14T09:16:36Z",
            "expires": "2027-07-14T09:15:35Z",
            "nameservers": [
                "armando.ns.cloudflare.com",
                "daphne.ns.cloudflare.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-21T02:22:52Z",
        "analysis_at": "2026-10-12T04:06:33Z",
        "stats": {
            "timeout": 0,
            "harmless": 44,
            "malicious": 13,
            "suspicious": 3,
            "undetected": 32
        },
        "detections": {
            "CRDF": "malicious",
            "DNS8": "suspicious",
            "ESET": "suspicious",
            "VIPRE": "phishing",
            "G-Data": "phishing",
            "Lionic": "phishing",
            "Sophos": "phishing",
            "CyRadar": "phishing",
            "Fortinet": "malware",
            "SOCRadar": "phishing",
            "Kaspersky": "phishing",
            "Seclookup": "malicious",
            "Gridinsoft": "suspicious",
            "BitDefender": "phishing",
            "alphaMountain.ai": "phishing",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "categories": {
            "alphaMountain.ai": "Phishing (alphaMountain.ai)"
        },
        "registrar": "DYNADOT LLC",
        "created": "2026-07-14T09:15:35Z",
        "expires": "2027-07-14T09:15:35Z",
        "updated": "2026-07-14T09:16:36Z",
        "first_seen": "2026-07-14T09:45:49Z",
        "dns": [
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3035::ac43:cb3a"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "armando.ns.cloudflare.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "daphne.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "172.67.203.58"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "104.21.52.196"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3032::6815:34c4"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "armando.ns.cloudflare.com"
            }
        ],
        "dns_at": "2026-10-12T04:11:47Z",
        "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c",
        "cert": {
            "san": [
                "andes-rendivo-italy.com",
                "*.andes-rendivo-italy.com"
            ],
            "issuer": "Google Trust Services / WE1",
            "serial": "e4d19baffd4b013f0e90eec09a3aae23",
            "sha256": "375cfc493b51e635f3cc5bdab1b41c010a68195b35b76dd830905fa0e34b37d2",
            "subject": "andes-rendivo-italy.com",
            "valid_to": "2026-12-10T11:29:03Z",
            "valid_from": "2026-09-11T10:30:28Z"
        },
        "whois": {
            "registrar": "DYNADOT LLC",
            "registrar_iana_id": "472",
            "registrar_url": "http://www.dynadot.com",
            "created": "2026-07-14T09:15:35Z",
            "updated": "2026-07-14T09:16:36Z",
            "expires": "2027-07-14T09:15:35Z",
            "status": [
                "clientTransferProhibited"
            ],
            "nameservers": [
                "armando.ns.cloudflare.com",
                "daphne.ns.cloudflare.com"
            ],
            "dnssec": "unsigned"
        },
        "rdap": {
            "status": [
                "transfer prohibited"
            ],
            "events": {
                "expiration": "2027-07-14T09:15:35Z",
                "last changed": "2026-07-14T09:16:36Z",
                "registration": "2026-07-14T09:15:35Z",
                "registrar expiration": "2027-07-14T09:15:35Z",
                "last update of RDAP database": "2026-10-10T08:22:06Z"
            }
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-21T02:27:48Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "andes-rendivo-italy.com"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "archives": {
            "last": "2026-10-21T02:22:29Z",
            "first": "2026-10-12T07:10:06Z",
            "changes": 1,
            "days_archived": 2,
            "scans_per_day": 0.11,
            "avg_page_bytes": 19150
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true,
            "sitemaps": [
                "https://andes-rendivo-italy.com/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 10
        },
        "social_tags": {
            "ogUrl": "https://andes-rendivo-italy.com/",
            "title": "Andes Rendivo | Piattaforma Digitale per una Navigazione Più Intuitiva 2026",
            "ogType": "website",
            "robots": "index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1",
            "ogImage": "https://andes-rendivo-italy.com/static/template_18/zeongrow/image.png",
            "ogTitle": "Andes Rendivo | Piattaforma Digitale per una Navigazione Più Intuitiva 2026",
            "ogSiteName": "Andes Rendivo",
            "themeColor": "#f4f6fb",
            "description": "La piattaforma Andes Rendivo crea uno spazio pratico e ben organizzato per consultare contenuti, mettere in evidenza gli elementi utili e affrontare le attività digitali con un percorso più naturale.",
            "twitterCard": "summary_large_image",
            "canonicalUrl": "https://andes-rendivo-italy.com/",
            "ogDescription": "La piattaforma Andes Rendivo crea uno spazio pratico e ben organizzato per consultare contenuti, mettere in evidenza gli elementi utili e affrontare le attività digitali con un percorso più naturale."
        },
        "trackers": {
            "requests": 11,
            "trackers": [
                {
                    "name": "Cloudflare",
                    "company": "Cloudflare",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 2
                },
                {
                    "name": "Google Fonts",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "jsDelivr",
                    "company": "jsDelivr",
                    "category": "Hosting",
                    "requests": 4
                }
            ]
        },
        "mixed_content": {
            "no_sri": [
                "https://cdn.jsdelivr.net/npm/intl-tel-input@23.0.12/build/js/intlTelInput.min.js"
            ],
            "third_party_scripts": 1
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 5,
                "tls": 25,
                "wait": 297,
                "connect": 45,
                "download": 21
            },
            "response_ms": 393
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1",
                "TLSv1.1",
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443,
                8080
            ]
        },
        "carbon": {
            "bytes": 75547,
            "co2_grams": 0.0028,
            "cleaner_than": 28
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "172.64.34.169",
                    "host": "daphne.ns.cloudflare.com"
                },
                {
                    "ip": "108.162.195.225",
                    "host": "armando.ns.cloudflare.com"
                }
            ],
            "zone": "andes-rendivo-italy.com"
        },
        "cookies": {
            "cookies": [
                {
                    "name": "_subid",
                    "session": true
                },
                {
                    "name": "csrftoken",
                    "same_site": "Lax"
                }
            ]
        },
        "location": {
            "ip": "2606:4700:3035::ac43:cb3a",
            "asn": "13335",
            "org": "Cloudflare, Inc.",
            "city": "San Francisco",
            "country": "US"
        },
        "ssl": {
            "issuer": "Google Trust Services / WE1",
            "subject": "andes-rendivo-italy.com"
        },
        "dns": {
            "A": [
                "172.67.203.58",
                "104.21.52.196"
            ],
            "NS": [
                "armando.ns.cloudflare.com",
                "daphne.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"armando.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2414873651, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
            "AAAA": [
                "2606:4700:3035::ac43:cb3a",
                "2606:4700:3032::6815:34c4"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": "DENY",
            "referrerPolicy": "same-origin",
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": "nosniff",
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": "same-origin",
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "firewall": {
            "waf": "Cloudflare",
            "has_waf": true
        },
        "get_ip": {
            "ip": "2606:4700:3032::6815:34c4",
            "family": 6
        },
        "redirects": {
            "chain": [
                "https://andes-rendivo-italy.com"
            ]
        },
        "tech_stack": {
            "technologies": [
                "Python",
                "Django",
                "jsDelivr",
                "Google Font API",
                "cdnjs",
                "Cloudflare",
                "Open Graph",
                "HTTP/3"
            ]
        },
        "linked_pages": {
            "internal_count": 10
        },
        "whois": {
            "registrar": "Dynadot Inc",
            "created": "2026-07-14T09:15:35Z",
            "updated": "2026-07-14T09:16:36Z",
            "expires": "2027-07-14T09:15:35Z",
            "status": [
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "armando.ns.cloudflare.com",
                "daphne.ns.cloudflare.com"
            ]
        },
        "headers": {
            "headers": {
                "server": "cloudflare",
                "content-type": "text/html; charset=utf-8",
                "x-frame-options": "DENY",
                "x-content-type-options": "nosniff",
                "referrer-policy": "same-origin",
                "cross-origin-opener-policy": "same-origin"
            }
        }
    }
}
```