casatua-srl.it
“CasaTua Srl”
casatua-srl.it — Último activo conocido (HTTP 301). Suplantación de marca: Unknown; Tipo de estafa: Impersonation. Resumen de las pruebas: VirusTotal 14/89 (ADMINUSLabs, alphaMountain.ai, BitDefender, CyRadar, Forcepoint ThreatSeeker); PhishDestroy score 100/100. Registrador: Aruba s.p.a.
El análisis detallado de PhishDestroy AI se mantiene en inglés para conservar el registro forense original.
Resumen de las pruebas
PhishDestroy first observed casatua-srl.it on Sep 19, 2026. Stored content metadata identifies Unknown as the apparent target. The captured page title is “CasaTua Srl”. Stored page analysis classifies the content as impersonation. Current evidence score: 100/100 (critical).
One source contains a positive finding: VirusTotal. VirusTotal recorded 14 detections among 89 engines: ADMINUSLabs, alphaMountain.ai, BitDefender, CyRadar, Forcepoint ThreatSeeker, Fortinet, G-Data, Gridinsoft, Lionic, Seclookup, SOCRadar, Sophos, VIPRE, Webroot on Sep 21, 2026 at 01:04 UTC. Non-positive and contextual checks: AlienVault OTX listed 6 community pulse references (not vendor detections) on Sep 21, 2026 at 01:05 UTC. The separate external-blocklist snapshot contained no matches on Sep 20, 2026 at 22:20 UTC. Google Safe Browsing returned no flag on Sep 21, 2026 at 01:04 UTC. URLScan completed without a malicious verdict (score 0) on Sep 20, 2026 at 03:30 UTC.
HTTP 301 was recorded on Sep 20, 2026 at 22:50 UTC. Registration records for the domain list Aruba s.p.a. as the registrar and Oct 16, 2017 as the creation date. At collection time, the hostname resolved to 31.11.36.56 on AS31034 (ARUBA-ASN Aruba S.p.A., IT). The recorded endpoint location is Arezzo, IT. The stored server header is aruba-proxy. DOM analysis on Sep 20, 2026 at 02:20 UTC returned 98/100. The evidence archive retains 3 visual captures from PhishDestroy and URLScan. TLS metadata lists Actalis S.p.A. / Actalis Domain Validated TLS Server RSA CA 2025 as the certificate issuer with validity through Feb 19, 2027; checked Sep 19, 2026 at 22:02 UTC.
Stored content provides classification context, but only one source contains a positive finding.
Forensic History & Detection Timeline
-
VirusTotal Detections Update Sep 20, 2026 · 06:04 UTCVirusTotal scanner detections updated from 14 to 14. Added scanner alerts: SOCRadar. Resolved alerts: Chong Lua Dao.
-
Threat First Observed Sep 19, 2026 · 23:53 UTCDomain ingestion complete. Initial state is marked as unknown pointing to IP
31.11.36.56.
Proceso de respuesta ante amenazas Pipeline
Estado de la lista de bloqueados pública
Evasion analysis
Cloaking suspected: scanner and victim titles differ
Stored crawler-versus-browser observations for this host, plus a live fingerprint check for Keitaro-style traffic distribution systems.
- Stored cloaking flag
- Not yet scanned
- Last cloaking scan
- Server header seen by scanner
aruba-proxy
Scanner note: redirect: raw=redirect_301; http=301; via=https_proxy; location=https://www.casatua-srl.it/; server=aruba-proxy
Tecnologías · 11 identified
Análisis de VirusTotal
Análisis del rendimiento del sitio
Google PageSpeed Insights — mobile performance audit of casatua-srl.it · checked Sep 19, 2026
Datos y informes externos
¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.