# languagexperience.it — Recorded security evidence | PhishDestroy
Content language: English
Canonical HTML report: https://phishdestroy.io/domain/languagexperience.it/
Machine-readable companion: https://phishdestroy.io/domain/languagexperience.it/llm.txt
## Summary
PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.
## Stored observations
- Listed by PhishDestroy: yes
- Availability at last stored check: Last known active
- First observed by PhishDestroy: 2026-11-11 08:01:11 UTC
- Selected availability observation: 2026-11-11T08:12:38Z
- Stored record updated: 2026-11-11 08:46:49 UTC
- VirusTotal detections in the stored snapshot: 13/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: checked_clean
## Stored infrastructure
- Observed IP address: 195.15.242.189
- Registrar in stored WHOIS data: Genesys Informatica S.r.l.
- Last stored HTTP status: 301 (observed: 2026-11-11T08:12:38Z)
- Registration date in stored WHOIS data: 2021-11-18 08:25:07 UTC
## Evidence links
- URLScan report: https://urlscan.io/result/01a1c9a8-a7a1-702f-8b7d-a54c7ecbe62a/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/languagexperience.it
- Certificate Transparency search: https://crt.sh/?q=%25.languagexperience.it
- Web Archive lookup: https://web.archive.org/web/*/https://languagexperience.it/
## Corrections
- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq
## Public report package
PhishDestroy stores a record for languagexperience.it. Source observations are dated separately; missing checks do not establish safety.
PhishDestroy stores a record for languagexperience.it. Source observations are dated separately; missing checks do not establish safety.
A reviewed analysis is not available for this text revision. Consult the dated source records below.
Package revision: 38162f4dca285039b20327ed023e78f15753be7da47a08c9bd5d7ebdf080ded1
Source facts (timestamps as stored): {"record_id":1915846,"first_recorded_at":"2026-11-11 09:01:11","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":13,"denominator":92,"malicious":12,"suspicious":1,"vendors":{"VIPRE":"phishing","G-Data":"phishing","Lionic":"phishing","Sophos":"phishing","CyRadar":"phishing","Webroot":"malicious","Fortinet":"spam","Seclookup":"malicious","Gridinsoft":"phishing","SafeToOpen":"phishing","ADMINUSLabs":"malicious","BitDefender":"phishing","alphaMountain.ai":"phishing"},"observed_at":"2026-11-05T23:37:17Z","checked_at":null,"fetched_at":"2026-11-11T08:25:33Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":13,"denominator":92,"malicious":null,"suspicious":null,"vendors":["ADMINUSLabs","alphaMountain.ai","BitDefender","CyRadar","Fortinet","G-Data","Gridinsoft","Lionic","SafeToOpen","Seclookup","Sophos","VIPRE","Webroot"],"observed_at":"2026-11-05 23:37:17","checked_at":"2026-11-11 09:25:33","fetched_at":"2026-11-11 08:25:33","time_basis":"as stored; legacy timezone not established"},"record_source":"phishdestroy.technologies.vt","vendor_labels":{"VIPRE":"phishing","G-Data":"phishing","Lionic":"phishing","Sophos":"phishing","CyRadar":"phishing","Webroot":"malicious","Fortinet":"spam","Seclookup":"malicious","Gridinsoft":"phishing","SafeToOpen":"phishing","ADMINUSLabs":"malicious","BitDefender":"phishing","alphaMountain.ai":"phishing"},"vendor_names":["VIPRE","G-Data","Lionic","Sophos","CyRadar","Webroot","Fortinet","Seclookup","Gridinsoft","SafeToOpen","ADMINUSLabs","BitDefender","alphaMountain.ai"],"stats":{"timeout":0,"harmless":47,"malicious":12,"suspicious":1,"undetected":32}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"checked_clean","verdict":0,"checked_at":"2026-11-11 09:45:40"},"spamhaus":{"source":"Spamhaus","verdict":null,"checked_at":null},"availability":{"state":"alive","label_key":"availability.active","detail_key":"detail.latest_reachability","params":[],"source":"current_http_probe","record_id":1915846,"scope":"checked_url","observed_at":"2026-11-11T08:12:38Z","http_status":301,"http_observed_at":"2026-11-11T08:12:38Z","stored_http_code":301,"stored_http_observed_at":"2026-11-11T08:12:38Z","legacy_site_status":"alive","supports_outcome_badge":false,"content_classification":"unknown","content_classification_at":null,"registration_state":"unknown","policy":"20261102-dated-availability-v2"}}
## Stored page captures
- URLScan · 2026-11-11: https://screenshots.phishdestroy.io/us/01a1c9a8-a7a1-702f-8b7d-a54c7ecbe62a.png
Captured: 2026-11-11 08:10:43 UTC
Source report: https://urlscan.io/result/01a1c9a8-a7a1-702f-8b7d-a54c7ecbe62a/
SHA-256: ec4527e69b27034d858190465f4872395909e5ad48813d9efc2c3e129d6269b4
- URLScan · 2026-06-07: https://screenshots.phishdestroy.io/us/019ea33a-ce39-7208-b9b1-d9011d670b4b.png
Captured: 2026-06-07 17:56:49 UTC
Source report: https://urlscan.io/result/019ea33a-ce39-7208-b9b1-d9011d670b4b/
SHA-256: 2297999d99305b5e3b9ef61fcce8e5da859769138de8f90a814fbe9711abdf6c
- URLScan · 2025-12-08: https://screenshots.phishdestroy.io/us/019afdd8-3502-7075-bfa7-071081731ada.png
Captured: 2025-12-08 12:03:26 UTC
Source report: https://urlscan.io/result/019afdd8-3502-7075-bfa7-071081731ada/
SHA-256: 1ecf567651653141eb338907d9547b87c3cd55e169ac9058636b79ec7b08fb1e
- URLScan · 2026-03-20: https://screenshots.phishdestroy.io/us/019d0970-c7f3-759d-82c7-de430cad3b6f.png
Captured: 2026-03-20 04:11:28 UTC
Source report: https://urlscan.io/result/019d0970-c7f3-759d-82c7-de430cad3b6f/
SHA-256: 2297999d99305b5e3b9ef61fcce8e5da859769138de8f90a814fbe9711abdf6c
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/0d534f48-126a-4f56-a48f-b334da15a203.png
Captured: 2026-11-11 08:12:14 UTC
Source report: https://radar.cloudflare.com/scan/0d534f48-126a-4f56-a48f-b334da15a203
SHA-256: 4aa1760be7ab29489a3ad21eaf34257ff1e236f707f3edc6dd1c3885e9631b52
## Collected source observations
Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
"urlscan": {
"v": 1,
"fetched_at": "2026-11-11T08:13:16Z",
"uuid": "01a1c9a8-a7a1-702f-8b7d-a54c7ecbe62a",
"scanned_at": "2026-11-11T08:10:43Z",
"final_url": "https://www.languagexperience.it/",
"status": 200,
"redirected": "https-only",
"redirects": [
{
"to": "https://www.languagexperience.it/",
"from": "http://www.languagexperience.it/",
"status": 307
}
],
"ip": "195.15.242.189",
"ptr": "195-15-242-189.dc3-a.pub1.etik-cloud.com",
"domains": [
"fonts.gstatic.com",
"fonts.googleapis.com"
],
"ips": [
"142.251.20.94",
"2a00:1450:4001:c13::5f",
"195.15.242.189"
],
"asns": [
"15169",
"29222"
],
"countries": [
"US",
"DE",
"CH"
],
"link_domains": [
"www.facebook.com",
"www.instagram.com",
"www.3web.it"
],
"social": [
"https://www.facebook.com/people/Language-Experience/100057146513310",
"https://www.instagram.com/language_experience_17"
],
"doc_hash": "ce6d36c91249526a82ffb4dfb76be59c29467e91b72046059248db5e400fb2dd",
"script_hashes": [
"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf",
"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89",
"b7a27a4b4abfc300eaf7d9151afeef8df2663d98586e38f59f91bbe98ef30af7",
"7719ed89b8e03dc6cad563107c6ce580cd366bd8f43e6dc0ce45d16c3b6ba315",
"b250c7e6edacf2090b7ca2202fe4504254312671112fcb5fcce9eff32bbe41c1",
"688388d3f66cba64d0ed08ac36ef1793849704ec2c529999b5fcb09e4e965e50",
"2a6587a9cb5c38f6ce3350f1b4c4cee3bf7f5ee166947217c623a835ad91a6d0",
"071083be0dddb45b1d0f2abc363a6193cf3d9f152f8e37bbcb436ed251f9fa62",
"0aa391438a17681cca2335de939b0d489909276ca40c716686290d9b5aa7c38c",
"e227741aa17c00bbc42e83159275904bd7d20937b90d071711966246beed3f78"
],
"globals": [
"theplus_ajax_url",
"theplus_ajax_post_url",
"theplus_nonce",
"jQuery",
"Waypoint",
"ct_localizations",
"blocksyJsonP",
"ctEvents",
"ctFrontend",
"webpackChunkelementorFrontend",
"elementorModules",
"elementorFrontendConfig",
"elementorFrontend",
"complianz",
"webpackChunkelementor_pro",
"wp",
"ElementorProFrontendConfig",
"elementorProFrontend",
"cmplz_log",
"cmplz_create_element",
"cmplz_add_event",
"cmplz_is_hidden",
"cmplz_html_decode",
"cmplz_sanitize_placeholder_html",
"cmplz_is_safe_script_src",
"cmplz_trap_focus",
"cmplz_handle_tab_navigation",
"cmplz_release_focus_trap",
"cmplzLoadConsentAreaContent",
"cmplz_run_script",
"cmplz_maybe_run_waiting_scripts",
"cmplz_set_blocked_content_container",
"cmplz_insert_placeholder_text",
"cmplz_set_blocked_content_container_aspect_ratio",
"cmplz_enable_category",
"cmplz_remove_placeholder",
"cmplz_get_waiting_script",
"cmplz_array_is_empty",
"cmplz_is_waiting_script",
"cmplz_run_after_all_scripts"
],
"cookies": [
"X_CACHE_KEY",
"pll_language"
],
"tls": {
"san": [
"languagexperience.it",
"www.languagexperience.it"
],
"cipher": "AES_256_GCM",
"issuer": "YR1",
"subject": "languagexperience.it",
"protocol": "TLS 1.3",
"valid_to": "2027-01-08T22:28:52Z",
"valid_from": "2026-10-10T22:28:53Z"
},
"domain_age_days": 1285,
"apex_age_days": 1818,
"tls_age_days": 31,
"tls_valid_days": 89,
"requests": 68,
"verdicts": {
"engines": {
"tags": [
"urlscan-ml",
"urlscan-ml-2aab354"
],
"score": -84,
"malicious": false
},
"overall": {
"score": 0,
"malicious": false
}
},
"headers": {
"server": "nginx",
"content-type": "text/html; charset=UTF-8",
"strict-transport-security": "max-age=31536000",
"permissions-policy": "private-state-token-redemption=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\"), private-state-token-issuanc",
"link": "; rel=\"https://api.w.org/\"\n; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\"\n200000"
},
"dns": [
{
"name": "languagexperience.it",
"type": "A",
"value": "195.15.242.189"
},
{
"name": "www.languagexperience.it",
"type": "A",
"value": "195.15.242.189"
}
],
"dnssec_valid": false,
"ip": "127.0.1.14",
"verdict": {
"tags": [
"phishing"
],
"malicious": true,
"categories": [
"phishing"
]
},
"whois": {
"registrar": "GIF-REG",
"created": "2021-11-18T09:25:07Z",
"updated": "2026-10-05T00:47:50Z",
"expires": "2027-09-19T00:00:00Z",
"nameservers": [
"ns1.dnsitalia.net",
"ns2.dnsitalia.net",
"nsct.dnsitalia.net",
"nsrm.dnsitalia.net"
]
}
},
"vt": {
"v": 1,
"fetched_at": "2026-11-11T08:25:33Z",
"analysis_at": "2026-11-05T23:37:17Z",
"stats": {
"timeout": 0,
"harmless": 47,
"malicious": 12,
"suspicious": 1,
"undetected": 32
},
"detections": {
"VIPRE": "phishing",
"G-Data": "phishing",
"Lionic": "phishing",
"Sophos": "phishing",
"CyRadar": "phishing",
"Webroot": "malicious",
"Fortinet": "spam",
"Seclookup": "malicious",
"Gridinsoft": "phishing",
"SafeToOpen": "phishing",
"ADMINUSLabs": "malicious",
"BitDefender": "phishing",
"alphaMountain.ai": "phishing"
},
"reputation": 0,
"categories": {
"alphaMountain.ai": "Phishing (alphaMountain.ai)"
},
"first_seen": "2023-10-09T11:54:05Z",
"dns": [
{
"ttl": 10800,
"type": "NS",
"value": "ns1.dnsitalia.net"
},
{
"ttl": 10800,
"type": "NS",
"value": "ns2.dnsitalia.net"
},
{
"ttl": 10800,
"type": "A",
"value": "195.15.242.189"
},
{
"ttl": 10800,
"type": "NS",
"value": "nsrm.dnsitalia.net"
},
{
"ttl": 10800,
"type": "NS",
"value": "nsct.dnsitalia.net"
},
{
"ttl": 10800,
"type": "SOA",
"rname": "info.interhost.it",
"value": "ns1.dnsitalia.net"
}
],
"dns_at": "2026-11-05T23:37:32Z",
"jarm": "3fd3fd0003fd3fd21c42d42d000000bdfc58c9a46434368cf60aa440385763",
"cert": {
"san": [
"languagexperience.it",
"www.languagexperience.it"
],
"issuer": "Let's Encrypt / YR1",
"serial": "58997e1446e96b6c85ceb32eb803b56a55a",
"sha256": "9d16e4ecbeaec1922775dce3f1180876175d3c8edd7d17922f4f5cbf4b9b17d6",
"subject": "languagexperience.it",
"valid_to": "2027-01-08T22:28:52Z",
"valid_from": "2026-10-10T22:28:53Z",
"observed_at": "2026-11-05T23:37:32Z"
},
"whois": {
"dnssec": "yes"
}
},
"webcheck": {
"v": 1,
"fetched_at": "2026-11-11T08:16:14Z",
"mail_config": {
"spf_lookups": 0
},
"block_lists": {
"resolvers": 12,
"blocked_count": 0
},
"archives": {
"last": "2026-11-11T08:14:56Z",
"first": "2013-08-09T10:17:12Z",
"changes": 14,
"days_archived": 16,
"scans_per_day": 0,
"avg_page_bytes": 6979
},
"robots_txt": {
"agents": [
"*"
],
"present": true,
"sitemaps": [
"https://www.languagexperience.it/wp-sitemap.xml"
]
},
"sitemap": {
"present": true,
"url_count": 21
},
"social_tags": {
"title": "Scuola di Lingua Language Experience",
"robots": "max-image-preview:large",
"generator": "WordPress 7.1.4",
"canonicalUrl": "https://www.languagexperience.it/"
},
"trackers": {
"requests": 44,
"trackers": [
{
"name": "Google Fonts",
"company": "Google",
"country": "US",
"category": "Hosting",
"requests": 1
}
]
},
"mixed_content": {
"third_party_scripts": 0
},
"status": {
"up": true,
"code": 301,
"timings": {
"dns": 29,
"tls": 24,
"wait": 1097,
"connect": 95,
"download": 0
},
"response_ms": 1245
},
"tls_connection": {
"alpn": "h2",
"cipher": "TLS_AES_256_GCM_SHA384",
"protocol": "TLSv1.3",
"versions": [
"TLSv1.1",
"TLSv1.2",
"TLSv1.3"
],
"authorized": true,
"forward_secrecy": true
},
"ports": {
"open": [
21,
80,
443
]
},
"carbon": {
"bytes": 96939,
"co2_grams": 0.0035,
"cleaner_than": 23
},
"dns_server": {
"ns": [
{
"ip": "151.11.53.66",
"host": "nsrm.dnsitalia.net"
},
{
"ip": "151.11.50.4",
"host": "ns2.dnsitalia.net"
},
{
"ip": "194.242.61.66",
"host": "ns1.dnsitalia.net"
},
{
"ip": "52.29.120.99",
"host": "nsct.dnsitalia.net"
}
],
"zone": "languagexperience.it"
},
"cookies": {
"cookies": [
{
"name": "X_CACHE_KEY"
},
{
"name": "pll_language",
"secure": true,
"same_site": "Lax"
},
{
"name": "X_CACHE_KEY"
}
]
},
"location": {
"ip": "195.15.242.189",
"asn": "29222",
"org": "Infomaniak Network Management",
"city": "Geneva",
"country": "CH"
},
"ssl": {
"issuer": "Let's Encrypt / YR1",
"subject": "languagexperience.it"
},
"dns": {
"A": [
"195.15.242.189"
],
"NS": [
"nsrm.dnsitalia.net",
"ns2.dnsitalia.net",
"nsct.dnsitalia.net",
"ns1.dnsitalia.net"
],
"SOA": "{\"nsname\": \"ns1.dnsitalia.net\", \"hostmaster\": \"info.interhost.it\", \"serial\": 2023091704, \"refresh\": 3600, \"retry\": 900, \"expire\": 86400, \"minttl\": 10800}"
},
"dnssec": {
"ds": false,
"rrsig": false,
"dnskey": false
},
"hsts": {
"header": "max-age=31536000",
"message": "HSTS header does not include all subdomains."
},
"http_security": {
"xFrameOptions": false,
"referrerPolicy": false,
"xXSSProtection": false,
"permissionsPolicy": "private-state-token-redemption=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https:/",
"xContentTypeOptions": false,
"contentSecurityPolicy": false,
"strictTransportPolicy": "max-age=31536000, max-age=31536000",
"crossOriginOpenerPolicy": false,
"crossOriginEmbedderPolicy": false,
"crossOriginResourcePolicy": false
},
"get_ip": {
"ip": "195.15.242.189",
"family": 4
},
"redirects": {
"chain": [
"https://languagexperience.it",
"https://www.languagexperience.it/"
],
"count": 1
},
"tech_stack": {
"technologies": [
"WordPress",
"MySQL",
"PHP",
"Blocksy",
"Blocksy Companion",
"Elementor",
"Nginx",
"Complianz",
"jQuery UI",
"jQuery Migrate",
"jQuery",
"core-js",
"Priority Hints",
"Google Font API",
"HSTS",
"Webpack",
"RSS",
"Module Federation"
]
},
"linked_pages": {
"external": [
"https://www.languagexperience.it/",
"https://www.languagexperience.it/corsi-di-italiano-per-stranieri/",
"https://www.facebook.com/people/Language-Experience/100057146513310/",
"https://www.instagram.com/language_experience_17/",
"https://www.languagexperience.it/chi-siamo/",
"https://www.languagexperience.it/servizi/",
"https://www.languagexperience.it/news/",
"https://www.languagexperience.it/contatti/",
"https://www.languagexperience.it/en/",
"https://www.languagexperience.it/dati-societari/",
"https://www.languagexperience.it/privacy-policy/",
"https://www.languagexperience.it/cookies/",
"https://www.languagexperience.it/disconoscimento/",
"https://www.languagexperience.it/imprint/",
"https://www.3web.it/"
],
"external_count": 15,
"internal_count": 4
},
"whois": {
"registrar": "Genesys Informatica S.r.l. GIF-REG",
"created": "2021-11-18T08:25:07Z",
"updated": "2026-10-04T22:47:50Z",
"expires": "2027-09-19T00:00:00Z",
"status": [
"ok"
],
"nameservers": [
"ns1.dnsitalia.net",
"ns2.dnsitalia.net",
"nsct.dnsitalia.net",
"nsrm.dnsitalia.net"
]
},
"headers": {
"headers": {
"server": "nginx",
"content-type": "text/html; charset=UTF-8",
"strict-transport-security": "max-age=31536000, max-age=31536000",
"permissions-policy": "private-state-token-redemption=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\"), private-state-token-issuance=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challeng",
"link": "; rel=\"https://api.w.org/\", ; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", ; rel=shortlink",
"x-cache": "HIT"
}
}
}
}
```
## Complete dated records
Availability observations: https://phishdestroy.io/domain/languagexperience.it/records.json?source=availability&format=json
Source observation history: https://phishdestroy.io/domain/languagexperience.it/records.json?source=detections&format=json
PhishStats records: https://phishdestroy.io/domain/languagexperience.it/records.json?source=phishstats&format=json
Sent report records: https://phishdestroy.io/domain/languagexperience.it/records.json?source=sent_reports&format=json
Report history: https://phishdestroy.io/domain/languagexperience.it/records.json?source=report_history&format=json
Repeat report records: https://phishdestroy.io/domain/languagexperience.it/records.json?source=rereports&format=json
Follow-up records: https://phishdestroy.io/domain/languagexperience.it/records.json?source=followups&format=json
Content observations: https://phishdestroy.io/domain/languagexperience.it/records.json?source=content&format=json
## Dated availability observation
Latest stored reachability observation
```json
{
"state": "alive",
"label_key": "availability.active",
"detail_key": "detail.latest_reachability",
"params": [],
"source": "current_http_probe",
"record_id": 1915846,
"scope": "checked_url",
"observed_at": "2026-11-11T08:12:38Z",
"http_status": 301,
"http_observed_at": "2026-11-11T08:12:38Z",
"stored_http_code": 301,
"stored_http_observed_at": "2026-11-11T08:12:38Z",
"legacy_site_status": "alive",
"supports_outcome_badge": false,
"content_classification": "unknown",
"content_classification_at": null,
"registration_state": "unknown",
"policy": "20261102-dated-availability-v2"
}
```