leztruvin[.]pro

The domain leztruvin.pro is identified as a brand impersonation threat specifically targeting investment scams. Analysis indicates the site falsely presents itself as an AI trading platform under the title 'Leztruvin | AI Trading Platform | Official Website.' Currently, the domain is offline, though prior activity suggests it was actively used in fraudulent schemes to deceive users into financial transactions under false pretenses. Infrastructure analysis reveals the domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and resolves to the IP address 172.67.142.217. Detection metrics show that 6 of 95 security vendors on VirusTotal flagged the domain as malicious, while it appears on one security blocklist. Additional technical indicators include a Gridinsoft trust score of 0/100, use of Cloudflare for hosting, and an SSL certificate issued by Google Trust Services. The domain was created on March 27, 2026, an anomalous date suggesting potential registration data manipulation or a placeholder entry. Given the domain's current offline status, no immediate threat is present; however, the infrastructure and detection history warrant caution. Users are advised to treat any prior or future communications associated with leztruvin.pro as fraudulent. Organizations should monitor for re-registration attempts under similar naming conventions and update blocklists accordingly. Financial institutions and security teams are recommended to review transaction logs for connections to this domain to identify potential victims of the impersonation campaign.