# languagexperience.it — Recorded security evidence | PhishDestroy Content language: English Canonical HTML report: https://phishdestroy.io/domain/languagexperience.it/ Machine-readable companion: https://phishdestroy.io/domain/languagexperience.it/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: Last known active - First observed by PhishDestroy: 2026-11-11 08:01:11 UTC - Selected availability observation: 2026-11-11T08:12:38Z - Stored record updated: 2026-11-11 08:46:49 UTC - VirusTotal detections in the stored snapshot: 13/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: checked_clean ## Stored infrastructure - Observed IP address: 195.15.242.189 - Registrar in stored WHOIS data: Genesys Informatica S.r.l. - Last stored HTTP status: 301 (observed: 2026-11-11T08:12:38Z) - Registration date in stored WHOIS data: 2021-11-18 08:25:07 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a1c9a8-a7a1-702f-8b7d-a54c7ecbe62a/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/languagexperience.it - Certificate Transparency search: https://crt.sh/?q=%25.languagexperience.it - Web Archive lookup: https://web.archive.org/web/*/https://languagexperience.it/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Public report package PhishDestroy stores a record for languagexperience.it. Source observations are dated separately; missing checks do not establish safety. PhishDestroy stores a record for languagexperience.it. Source observations are dated separately; missing checks do not establish safety. A reviewed analysis is not available for this text revision. Consult the dated source records below. Package revision: 38162f4dca285039b20327ed023e78f15753be7da47a08c9bd5d7ebdf080ded1 Source facts (timestamps as stored): {"record_id":1915846,"first_recorded_at":"2026-11-11 09:01:11","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":13,"denominator":92,"malicious":12,"suspicious":1,"vendors":{"VIPRE":"phishing","G-Data":"phishing","Lionic":"phishing","Sophos":"phishing","CyRadar":"phishing","Webroot":"malicious","Fortinet":"spam","Seclookup":"malicious","Gridinsoft":"phishing","SafeToOpen":"phishing","ADMINUSLabs":"malicious","BitDefender":"phishing","alphaMountain.ai":"phishing"},"observed_at":"2026-11-05T23:37:17Z","checked_at":null,"fetched_at":"2026-11-11T08:25:33Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":13,"denominator":92,"malicious":null,"suspicious":null,"vendors":["ADMINUSLabs","alphaMountain.ai","BitDefender","CyRadar","Fortinet","G-Data","Gridinsoft","Lionic","SafeToOpen","Seclookup","Sophos","VIPRE","Webroot"],"observed_at":"2026-11-05 23:37:17","checked_at":"2026-11-11 09:25:33","fetched_at":"2026-11-11 08:25:33","time_basis":"as stored; legacy timezone not established"},"record_source":"phishdestroy.technologies.vt","vendor_labels":{"VIPRE":"phishing","G-Data":"phishing","Lionic":"phishing","Sophos":"phishing","CyRadar":"phishing","Webroot":"malicious","Fortinet":"spam","Seclookup":"malicious","Gridinsoft":"phishing","SafeToOpen":"phishing","ADMINUSLabs":"malicious","BitDefender":"phishing","alphaMountain.ai":"phishing"},"vendor_names":["VIPRE","G-Data","Lionic","Sophos","CyRadar","Webroot","Fortinet","Seclookup","Gridinsoft","SafeToOpen","ADMINUSLabs","BitDefender","alphaMountain.ai"],"stats":{"timeout":0,"harmless":47,"malicious":12,"suspicious":1,"undetected":32}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"checked_clean","verdict":0,"checked_at":"2026-11-11 09:45:40"},"spamhaus":{"source":"Spamhaus","verdict":null,"checked_at":null},"availability":{"state":"alive","label_key":"availability.active","detail_key":"detail.latest_reachability","params":[],"source":"current_http_probe","record_id":1915846,"scope":"checked_url","observed_at":"2026-11-11T08:12:38Z","http_status":301,"http_observed_at":"2026-11-11T08:12:38Z","stored_http_code":301,"stored_http_observed_at":"2026-11-11T08:12:38Z","legacy_site_status":"alive","supports_outcome_badge":false,"content_classification":"unknown","content_classification_at":null,"registration_state":"unknown","policy":"20261102-dated-availability-v2"}} ## Stored page captures - URLScan · 2026-11-11: https://screenshots.phishdestroy.io/us/01a1c9a8-a7a1-702f-8b7d-a54c7ecbe62a.png Captured: 2026-11-11 08:10:43 UTC Source report: https://urlscan.io/result/01a1c9a8-a7a1-702f-8b7d-a54c7ecbe62a/ SHA-256: ec4527e69b27034d858190465f4872395909e5ad48813d9efc2c3e129d6269b4 - URLScan · 2026-06-07: https://screenshots.phishdestroy.io/us/019ea33a-ce39-7208-b9b1-d9011d670b4b.png Captured: 2026-06-07 17:56:49 UTC Source report: https://urlscan.io/result/019ea33a-ce39-7208-b9b1-d9011d670b4b/ SHA-256: 2297999d99305b5e3b9ef61fcce8e5da859769138de8f90a814fbe9711abdf6c - URLScan · 2025-12-08: https://screenshots.phishdestroy.io/us/019afdd8-3502-7075-bfa7-071081731ada.png Captured: 2025-12-08 12:03:26 UTC Source report: https://urlscan.io/result/019afdd8-3502-7075-bfa7-071081731ada/ SHA-256: 1ecf567651653141eb338907d9547b87c3cd55e169ac9058636b79ec7b08fb1e - URLScan · 2026-03-20: https://screenshots.phishdestroy.io/us/019d0970-c7f3-759d-82c7-de430cad3b6f.png Captured: 2026-03-20 04:11:28 UTC Source report: https://urlscan.io/result/019d0970-c7f3-759d-82c7-de430cad3b6f/ SHA-256: 2297999d99305b5e3b9ef61fcce8e5da859769138de8f90a814fbe9711abdf6c - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/0d534f48-126a-4f56-a48f-b334da15a203.png Captured: 2026-11-11 08:12:14 UTC Source report: https://radar.cloudflare.com/scan/0d534f48-126a-4f56-a48f-b334da15a203 SHA-256: 4aa1760be7ab29489a3ad21eaf34257ff1e236f707f3edc6dd1c3885e9631b52 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-11-11T08:13:16Z", "uuid": "01a1c9a8-a7a1-702f-8b7d-a54c7ecbe62a", "scanned_at": "2026-11-11T08:10:43Z", "final_url": "https://www.languagexperience.it/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://www.languagexperience.it/", "from": "http://www.languagexperience.it/", "status": 307 } ], "ip": "195.15.242.189", "ptr": "195-15-242-189.dc3-a.pub1.etik-cloud.com", "domains": [ "fonts.gstatic.com", "fonts.googleapis.com" ], "ips": [ "142.251.20.94", "2a00:1450:4001:c13::5f", "195.15.242.189" ], "asns": [ "15169", "29222" ], "countries": [ "US", "DE", "CH" ], "link_domains": [ "www.facebook.com", "www.instagram.com", "www.3web.it" ], "social": [ "https://www.facebook.com/people/Language-Experience/100057146513310", "https://www.instagram.com/language_experience_17" ], "doc_hash": "ce6d36c91249526a82ffb4dfb76be59c29467e91b72046059248db5e400fb2dd", "script_hashes": [ "cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf", "5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89", "b7a27a4b4abfc300eaf7d9151afeef8df2663d98586e38f59f91bbe98ef30af7", "7719ed89b8e03dc6cad563107c6ce580cd366bd8f43e6dc0ce45d16c3b6ba315", "b250c7e6edacf2090b7ca2202fe4504254312671112fcb5fcce9eff32bbe41c1", "688388d3f66cba64d0ed08ac36ef1793849704ec2c529999b5fcb09e4e965e50", "2a6587a9cb5c38f6ce3350f1b4c4cee3bf7f5ee166947217c623a835ad91a6d0", "071083be0dddb45b1d0f2abc363a6193cf3d9f152f8e37bbcb436ed251f9fa62", "0aa391438a17681cca2335de939b0d489909276ca40c716686290d9b5aa7c38c", "e227741aa17c00bbc42e83159275904bd7d20937b90d071711966246beed3f78" ], "globals": [ "theplus_ajax_url", "theplus_ajax_post_url", "theplus_nonce", "jQuery", "Waypoint", "ct_localizations", "blocksyJsonP", "ctEvents", "ctFrontend", "webpackChunkelementorFrontend", "elementorModules", "elementorFrontendConfig", "elementorFrontend", "complianz", "webpackChunkelementor_pro", "wp", "ElementorProFrontendConfig", "elementorProFrontend", "cmplz_log", "cmplz_create_element", "cmplz_add_event", "cmplz_is_hidden", "cmplz_html_decode", "cmplz_sanitize_placeholder_html", "cmplz_is_safe_script_src", "cmplz_trap_focus", "cmplz_handle_tab_navigation", "cmplz_release_focus_trap", "cmplzLoadConsentAreaContent", "cmplz_run_script", "cmplz_maybe_run_waiting_scripts", "cmplz_set_blocked_content_container", "cmplz_insert_placeholder_text", "cmplz_set_blocked_content_container_aspect_ratio", "cmplz_enable_category", "cmplz_remove_placeholder", "cmplz_get_waiting_script", "cmplz_array_is_empty", "cmplz_is_waiting_script", "cmplz_run_after_all_scripts" ], "cookies": [ "X_CACHE_KEY", "pll_language" ], "tls": { "san": [ "languagexperience.it", "www.languagexperience.it" ], "cipher": "AES_256_GCM", "issuer": "YR1", "subject": "languagexperience.it", "protocol": "TLS 1.3", "valid_to": "2027-01-08T22:28:52Z", "valid_from": "2026-10-10T22:28:53Z" }, "domain_age_days": 1285, "apex_age_days": 1818, "tls_age_days": 31, "tls_valid_days": 89, "requests": 68, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-2aab354" ], "score": -84, "malicious": false }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "nginx", "content-type": "text/html; charset=UTF-8", "strict-transport-security": "max-age=31536000", "permissions-policy": "private-state-token-redemption=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\"), private-state-token-issuanc", "link": "; rel=\"https://api.w.org/\"\n; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\"\n200000" }, "dns": [ { "name": "languagexperience.it", "type": "A", "value": "195.15.242.189" }, { "name": "www.languagexperience.it", "type": "A", "value": "195.15.242.189" } ], "dnssec_valid": false, "ip": "127.0.1.14", "verdict": { "tags": [ "phishing" ], "malicious": true, "categories": [ "phishing" ] }, "whois": { "registrar": "GIF-REG", "created": "2021-11-18T09:25:07Z", "updated": "2026-10-05T00:47:50Z", "expires": "2027-09-19T00:00:00Z", "nameservers": [ "ns1.dnsitalia.net", "ns2.dnsitalia.net", "nsct.dnsitalia.net", "nsrm.dnsitalia.net" ] } }, "vt": { "v": 1, "fetched_at": "2026-11-11T08:25:33Z", "analysis_at": "2026-11-05T23:37:17Z", "stats": { "timeout": 0, "harmless": 47, "malicious": 12, "suspicious": 1, "undetected": 32 }, "detections": { "VIPRE": "phishing", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "CyRadar": "phishing", "Webroot": "malicious", "Fortinet": "spam", "Seclookup": "malicious", "Gridinsoft": "phishing", "SafeToOpen": "phishing", "ADMINUSLabs": "malicious", "BitDefender": "phishing", "alphaMountain.ai": "phishing" }, "reputation": 0, "categories": { "alphaMountain.ai": "Phishing (alphaMountain.ai)" }, "first_seen": "2023-10-09T11:54:05Z", "dns": [ { "ttl": 10800, "type": "NS", "value": "ns1.dnsitalia.net" }, { "ttl": 10800, "type": "NS", "value": "ns2.dnsitalia.net" }, { "ttl": 10800, "type": "A", "value": "195.15.242.189" }, { "ttl": 10800, "type": "NS", "value": "nsrm.dnsitalia.net" }, { "ttl": 10800, "type": "NS", "value": "nsct.dnsitalia.net" }, { "ttl": 10800, "type": "SOA", "rname": "info.interhost.it", "value": "ns1.dnsitalia.net" } ], "dns_at": "2026-11-05T23:37:32Z", "jarm": "3fd3fd0003fd3fd21c42d42d000000bdfc58c9a46434368cf60aa440385763", "cert": { "san": [ "languagexperience.it", "www.languagexperience.it" ], "issuer": "Let's Encrypt / YR1", "serial": "58997e1446e96b6c85ceb32eb803b56a55a", "sha256": "9d16e4ecbeaec1922775dce3f1180876175d3c8edd7d17922f4f5cbf4b9b17d6", "subject": "languagexperience.it", "valid_to": "2027-01-08T22:28:52Z", "valid_from": "2026-10-10T22:28:53Z", "observed_at": "2026-11-05T23:37:32Z" }, "whois": { "dnssec": "yes" } }, "webcheck": { "v": 1, "fetched_at": "2026-11-11T08:16:14Z", "mail_config": { "spf_lookups": 0 }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "archives": { "last": "2026-11-11T08:14:56Z", "first": "2013-08-09T10:17:12Z", "changes": 14, "days_archived": 16, "scans_per_day": 0, "avg_page_bytes": 6979 }, "robots_txt": { "agents": [ "*" ], "present": true, "sitemaps": [ "https://www.languagexperience.it/wp-sitemap.xml" ] }, "sitemap": { "present": true, "url_count": 21 }, "social_tags": { "title": "Scuola di Lingua Language Experience", "robots": "max-image-preview:large", "generator": "WordPress 7.1.4", "canonicalUrl": "https://www.languagexperience.it/" }, "trackers": { "requests": 44, "trackers": [ { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 } ] }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 301, "timings": { "dns": 29, "tls": 24, "wait": 1097, "connect": 95, "download": 0 }, "response_ms": 1245 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1.1", "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 21, 80, 443 ] }, "carbon": { "bytes": 96939, "co2_grams": 0.0035, "cleaner_than": 23 }, "dns_server": { "ns": [ { "ip": "151.11.53.66", "host": "nsrm.dnsitalia.net" }, { "ip": "151.11.50.4", "host": "ns2.dnsitalia.net" }, { "ip": "194.242.61.66", "host": "ns1.dnsitalia.net" }, { "ip": "52.29.120.99", "host": "nsct.dnsitalia.net" } ], "zone": "languagexperience.it" }, "cookies": { "cookies": [ { "name": "X_CACHE_KEY" }, { "name": "pll_language", "secure": true, "same_site": "Lax" }, { "name": "X_CACHE_KEY" } ] }, "location": { "ip": "195.15.242.189", "asn": "29222", "org": "Infomaniak Network Management", "city": "Geneva", "country": "CH" }, "ssl": { "issuer": "Let's Encrypt / YR1", "subject": "languagexperience.it" }, "dns": { "A": [ "195.15.242.189" ], "NS": [ "nsrm.dnsitalia.net", "ns2.dnsitalia.net", "nsct.dnsitalia.net", "ns1.dnsitalia.net" ], "SOA": "{\"nsname\": \"ns1.dnsitalia.net\", \"hostmaster\": \"info.interhost.it\", \"serial\": 2023091704, \"refresh\": 3600, \"retry\": 900, \"expire\": 86400, \"minttl\": 10800}" }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "header": "max-age=31536000", "message": "HSTS header does not include all subdomains." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": "private-state-token-redemption=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https:/", "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": "max-age=31536000, max-age=31536000", "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "195.15.242.189", "family": 4 }, "redirects": { "chain": [ "https://languagexperience.it", "https://www.languagexperience.it/" ], "count": 1 }, "tech_stack": { "technologies": [ "WordPress", "MySQL", "PHP", "Blocksy", "Blocksy Companion", "Elementor", "Nginx", "Complianz", "jQuery UI", "jQuery Migrate", "jQuery", "core-js", "Priority Hints", "Google Font API", "HSTS", "Webpack", "RSS", "Module Federation" ] }, "linked_pages": { "external": [ "https://www.languagexperience.it/", "https://www.languagexperience.it/corsi-di-italiano-per-stranieri/", "https://www.facebook.com/people/Language-Experience/100057146513310/", "https://www.instagram.com/language_experience_17/", "https://www.languagexperience.it/chi-siamo/", "https://www.languagexperience.it/servizi/", "https://www.languagexperience.it/news/", "https://www.languagexperience.it/contatti/", "https://www.languagexperience.it/en/", "https://www.languagexperience.it/dati-societari/", "https://www.languagexperience.it/privacy-policy/", "https://www.languagexperience.it/cookies/", "https://www.languagexperience.it/disconoscimento/", "https://www.languagexperience.it/imprint/", "https://www.3web.it/" ], "external_count": 15, "internal_count": 4 }, "whois": { "registrar": "Genesys Informatica S.r.l. GIF-REG", "created": "2021-11-18T08:25:07Z", "updated": "2026-10-04T22:47:50Z", "expires": "2027-09-19T00:00:00Z", "status": [ "ok" ], "nameservers": [ "ns1.dnsitalia.net", "ns2.dnsitalia.net", "nsct.dnsitalia.net", "nsrm.dnsitalia.net" ] }, "headers": { "headers": { "server": "nginx", "content-type": "text/html; charset=UTF-8", "strict-transport-security": "max-age=31536000, max-age=31536000", "permissions-policy": "private-state-token-redemption=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\"), private-state-token-issuance=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challeng", "link": "; rel=\"https://api.w.org/\", ; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", ; rel=shortlink", "x-cache": "HIT" } } } } ``` ## Complete dated records Availability observations: https://phishdestroy.io/domain/languagexperience.it/records.json?source=availability&format=json Source observation history: https://phishdestroy.io/domain/languagexperience.it/records.json?source=detections&format=json PhishStats records: https://phishdestroy.io/domain/languagexperience.it/records.json?source=phishstats&format=json Sent report records: https://phishdestroy.io/domain/languagexperience.it/records.json?source=sent_reports&format=json Report history: https://phishdestroy.io/domain/languagexperience.it/records.json?source=report_history&format=json Repeat report records: https://phishdestroy.io/domain/languagexperience.it/records.json?source=rereports&format=json Follow-up records: https://phishdestroy.io/domain/languagexperience.it/records.json?source=followups&format=json Content observations: https://phishdestroy.io/domain/languagexperience.it/records.json?source=content&format=json ## Dated availability observation Latest stored reachability observation ```json { "state": "alive", "label_key": "availability.active", "detail_key": "detail.latest_reachability", "params": [], "source": "current_http_probe", "record_id": 1915846, "scope": "checked_url", "observed_at": "2026-11-11T08:12:38Z", "http_status": 301, "http_observed_at": "2026-11-11T08:12:38Z", "stored_http_code": 301, "stored_http_observed_at": "2026-11-11T08:12:38Z", "legacy_site_status": "alive", "supports_outcome_badge": false, "content_classification": "unknown", "content_classification_at": null, "registration_state": "unknown", "policy": "20261102-dated-availability-v2" } ```