itauna[.]surf

itauna.surf is an active domain currently under investigation for potential phishing activity. The domain was registered through NAMECHEAP INC and created on July 30, 2026. Its infrastructure utilizes dns1.registrar-servers.com and dns2.registrar-servers.com as nameservers, and it resolves to the IP address 162.255.119.107. Although VirusTotal scans from 91 vendors have not flagged the site, there is a significant indicator: the domain appears on at least one security blocklist and is actively blocked by PhishDestroy.

This blocklist presence suggests a degree of threat, even in the absence of widespread detection across major antivirus vendors, and warrants heightened scrutiny from defenders. The exact content and purpose of the site have not yet been analyzed, and no specific page title or brand target is documented in the current intelligence. Defenders should not interpret the lack of VirusTotal detections as proof of safety, as blocklist evidence alone can indicate phishing risk ahead of broader vendor recognition. The domain remains active as of the report date, presenting potential exposure to users if accessed.

Investigation should prioritize correlating blocklist findings against internal threat intelligence and monitoring for signs of user targeting or credential harvesting. Relevant mitigation actions include network-level enforcement of blocklists, ongoing review for new threat indicators, and preserving logs associated with access to itauna.surf for forensic analysis. Further analysis of the site’s content is recommended to establish whether more overt phishing tactics or brand impersonation are present.