treasury-aioz[.]com

This domain, treasury-aioz.com, is identified as a brand impersonation phishing site targeting Google users. Registered on August 22, 2025, through Tucows Domains Inc., the domain was configured to impersonate Google's branding, likely to harvest login credentials or sensitive personal information. Despite its page title displaying 'WanderSphere Blog,' the underlying infrastructure and security flags indicate it was designed for credential theft, not legitimate blogging. The domain is now offline, but its short active lifespan and low trust score (0/100 on Gridinsoft) underscore its malicious intent.

Technical indicators confirm the threat. VirusTotal analysis shows 7 out of 95 security vendors flagging this domain as malicious. It resolves to IP address 188.114.97.3, hosted on Google Web Server with HSTS and HTTP/3 support, and uses an SSL certificate from Google Trust Services—a technique to appear legitimate. The domain appears on 1 security blocklist (PhishDestroy) and was registered less than three months before being taken offline, a hallmark of disposable phishing infrastructure. The use of Tucows Domains Inc., a known registrar for low-reputation domains, further supports the assessment.

Users who visited treasury-aioz.com should immediately change passwords for any Google accounts entered on the site and enable two-factor authentication. Scan devices for malware or credential-stealing software. Monitor financial accounts and email for suspicious activity, as credentials may have been compromised. Report the domain to relevant cybersecurity authorities. Avoid reusing passwords from any accounts associated with this domain. The offline status reduces immediate risk, but vigilance is advised as similar domains may reappear.