news[.]agenziaesattoriale[.]it

The domain news.agenziaesattoriale.it was registered on February 21, 2026 through Aruba s.p.a. and is currently resolving to the IP address 54.170.199.139, which belongs to Amazon.com, Inc. (AS16509) and is geolocated in Ireland. Four authoritative name servers are configured: dns.technorail.com, dns2.technorail.com, dns3.arubadns.net and dns4.arubadn. The site serves content over HTTPS with a Sectigo Limited certificate issued under the Sectigo Public Server Authentication CA DV R36 chain, and HTTP Strict Transport Security (HSTS) is enabled. An HTTP request returns a 200 status code and the page title reported by scanners is exactly the domain name, news.agenziaesattoriale.it, with no additional content description available.

Infrastructure signals indicate malicious intent. The domain appears on one known security blocklist and is actively blocked by the PhishDestroy feed, confirming that it is being used for phishing campaigns. VirusTotal has recorded detections from 13 out of 93 scanning engines, reinforcing the suspicion. The Gridinsoft trust score is 0 out of 100, a rating that denotes a lack of trustworthiness. The intelligence classification lists the scam type as Brand Impersonation, suggesting that the adversary is attempting to mimic a legitimate brand to harvest credentials or financial information.

Defenders should treat the domain as high‑risk and take immediate mitigation steps. Network perimeter filters and DNS resolvers ought to block both the domain name and its resolved IP address. Since the hosting resides on Amazon’s infrastructure, it may be prudent to add the specific ASN (AS16509) to blocklists if broader protection is required, while monitoring for any related sub‑domains that could be spun up on the same cloud region. Email gateway solutions should be updated to flag messages that reference the domain or its brand impersonation pattern.