itension[.]com

The domain itension.com is currently active and returns HTTP status code 200, indicating that a web server is responding to requests. Registration data shows the domain was registered through 1800-website, LLC and is delegated to the Afternic nameservers ns1.afternic.com and ns2.afternic.com. VirusTotal has processed the domain with scans from 91 different vendors, and none of the vendors reported a detection at the time of analysis.

The domain appears on a single security blocklist and is explicitly blocked by the PhishDestroy feed, which suggests that at least one security vendor has classified the domain as malicious. No additional technical artefacts such as IP address, ASN, geographic location, SSL certificate details, or page title have been disclosed, leaving the underlying hosting environment and the specific content served by the site unverified. The lack of publicly available page content or brand targeting means that the exact phishing lure (e.g., credential‑stealing login page, counterfeit invoice, etc.) cannot be confirmed.

Defenders should treat the domain as a potential phishing vector: incorporate it into URL filtering rules, add it to internal blocklists, and monitor network traffic for any connections to the domain. Continuous re‑scanning with multi‑engine services and periodic checks against threat intelligence feeds are recommended to capture any future changes in classification or observed malicious activity.