mass.report
Scan Intelligence Report0/100
low Risk
www.casamaia.it
https://www.casamaia.it/s%C3%BCperbahis-bahis/
IP
104.21.31.196 · Cloudflare, Inc.
Location
Toronto, Canada
Domain Age
—
HTTP
520 · 13.9s
SSL
Valid· WE1, Google Trust Services, US
Status
COMPLETED
Domain Intelligence: casamaia.it
Scanned 2 times since Jun 13, 2026, 11:34 AM UTC
ℹ Low (5)
Linked Phishing Report
This scan is attached to a vendor submission report
Brand
ATO
Vendors
28/31
Status
partial
✓ apple✓ urlscan✓ avg✓ bitdefender✓ eset✓ chainpatrol✓ brightcloud✗ avast✗ drweb✓ polyswarm✓ sophos✓ yandex✓ microsoft✗ norton✓ openphish✓ kaspersky✓ cisa✓ virustotal✓ urlabuse✓ google✓ apwg✓ spamhaus✓ netcraft✓ emsisoft✓ phishtank✓ phishreport✓ isitphish✓ urlquery✓ mcafee✓ threatyeti✓ fortiguard
Registered-domain escalation
Submit casamaia.it as the primary IOC, enriched with evidence from hostile subdomains like www.casamaia.it.
KB/IOK Matches (0)—
No KB/IOK detections were recorded for this scan.
Scanner blocked by cloudflare
This scan likely captured a block/challenge page, so the AI analysis may not reflect the real site victims see.
ATO
Unknowntechnology | ecommerce · 7/19/2026
Summary
The page displays a Cloudflare 520 error for ATO, with branding that visually mimics the Cloudflare/visitor-status dashboard rather than a specific legitimate brand login. The page content is an error page generated by Cloudflare, not a credential-collecting impersonation of a known brand. However, the screenshot and HTML indicate SPA-like behavior and potential credential-collection UI could be present on the origin, but the current page is an error page served via Cloudflare with no explicit impersonation of a particular brand beyond generic status visuals.
Evidence Summary
▸Observed 2 capture stage(s); canonical stage is settled_render.
▸Distinctive asset clues: main.css, cf-icon-ok.png, cf-icon-browser.png.
Capture
Stages: 2
Canonical: Settled Render
Changed: No
Credential Signals
Forms: 0
Password fields: 0
Late-stage login UI: No
Resource Signals
Resources: 7
Hosts: 1
Domains: 1
Observed Signals (1)
No login forms or credential fields in static HTML revealed by the scan
Observed Indicators (1)
▸Page title and content correspond to Cloudflare error UI rather than an impersonated brand login
Risk AssessmentUsed in abuse reports
The page shows a legitimate Cloudflare 520 error for the domain ATO, not an explicit impersonation of a known brand. The evidence is insufficient to claim credential harvesting or impersonation on this page. However, the presence of Cloudflare’s error UI and SPA hints indicates the origin server may be misconfigured or temporarily unavailable. Monitor for recurring impersonation indicators or if the origin later serves credential-collecting UI under a misleading brand; currently, treat as potential first-party error exposure with watchful monitoring.
Recommended Action
Monitor
Cross-Reference9
URL Intelligence
Domain Intelligence
IP Intelligence
Public threat feed available — JSON API