crema-finance[.]com

The domain crema-finance.com was registered on July 22, 2026 through Fewmoretaps OU operating as Trustname.com. It is delegated to four nameservers—ares.trustname.com, zeus.trustname.com, ns1.anycastdns.cz and ns2.anycastdns.cz—and resolves to the IPv4 address 186.2.175.109. VirusTotal analysis shows that seven out of ninety‑one scanned security vendors flagged the domain, indicating a non‑trivial detection rate. The domain appears on a single external blocklist and is explicitly listed by the PhishDestroy mitigation service, confirming that at least one security consortium has taken enforcement action.

The current operational status is reported as active, and the risk rating assigned by the source is high. Publicly available metadata does not include an SSL certificate fingerprint, HTTP response codes, page title, or any observed content from the web server, so the exact nature of the hosted page cannot be verified at this time. No additional intelligence such as OTX references, Safe Browsing alerts, or further vendor detections is present in the supplied data set. Consequently, the analysis relies solely on registration details, DNS configuration, IP address, and the limited detection signals described above.

Defenders should consider adding crema-finance.com to outbound and inbound filtering rules, especially for email gateways and web proxies that target financial‑related traffic. Monitoring of DNS queries for the four listed nameservers and the associated IP address is recommended to detect potential lateral use of the same infrastructure. Because the domain is newly created and already flagged by multiple vendors, continuous re‑evaluation is advised. Organizations that have previously observed similar Trustname.com registrar patterns may wish to increase scrutiny of any communications that reference the "crema‑finance" brand, although no direct brand impersonation evidence is currently available.