sccblla[.]studioforster[.]it

Analysis of the domain sccblla.studioforster.it indicates it is an active phishing site with high-risk classification. The domain was registered through Register S.p.a. and has been active since September 17, 1998, though the subdomain sccblla appears to be a recent addition for malicious purposes. Infrastructure analysis reveals the domain resolves to the IP address 188.114.96.3 and utilizes Cloudflare nameservers (ursula.ns.cloudflare.com and renan.ns.cloudflare.com), a common tactic to obscure hosting details and evade takedowns.

As of July 29, 2026, the domain is flagged by one security blocklist, specifically PhishDestroy, and has been detected by one of 91 security vendors on VirusTotal, suggesting limited but confirmed malicious activity. The exact nature of the phishing campaign remains unconfirmed, as no specific brand target, scam type, or page content details are available in the provided intelligence. Defenders should treat this domain as a generic phishing threat, likely targeting Italian-speaking users given the .it ccTLD and the parent domain studioforster.it. The use of Cloudflare nameservers and a long-standing but repurposed domain may indicate an attempt to bypass reputation-based filters.

Network defenders are advised to block the domain at the DNS level and monitor for connections to the associated IP 188.114.96.3. Further investigation into the hosting provider and SSL certificate details may provide additional context, though no such data is currently available. Given the domain's active status and high-risk classification, immediate containment measures are recommended.