baseditaliano[.]pages[.]dev

The domain baseditaliano.pages.dev was created on February 21, 2026 and is currently taken offline, returning an HTTP 403 status. Infrastructure analysis shows the site was hosted on Cloudflare’s network, resolving to IP address 172.66.47.113, which belongs to AS13335 Cloudflare, Inc. in the United States. The authoritative nameservers are brodie.ns.cloudflare.com and jen.ns.cloudflare.com, confirming the Cloudflare registration. TLS termination used a certificate issued by Google Trust Services under the WE1 profile, and the site advertised modern security features such as HTTP Strict Transport Security (HSTS) and HTTP/3 support.

The page title presented by the server was "Suspected phishing site | Cloudflare," matching the generic phishing indicator. Google Safe Browsing flagged the domain for social engineering, and VirusTotal recorded detections from 10 of 93 scanning engines, indicating a measurable level of malicious classification. Independent blocklists have listed the domain, with PhishDestroy actively blocking it and a single additional security blocklist referencing it. Reputation scoring from Gridinsoft assigned a trust score of 0 out of 100, reinforcing the high‑risk assessment.

The known scam type is brand impersonation, though the specific victim brand is not disclosed in the available data. Because the site is offline, content‑level analysis (e.g., form fields, credential harvesting) could not be performed, leaving the exact phishing payload unknown. Defenders should continue to block the domain at network perimeter and DNS layers, monitor for any re‑registration or resurrection on the same IP range, and update internal threat intel feeds with the observed indicators: domain name, creation date, IP address, nameservers, SSL issuer, Google Safe Browsing flag, and VirusTotal detection count.