trez-investment[.]com

Analysis of trez-investment.com shows a newly registered domain (created February 21, 2026) that was active for a short period before being taken offline. The site presented a page title identical to the domain name, offering no additional context. Registry data indicates the domain was registered through NameCheap, Inc., and the hosting IP resolves to 107.172.61.186, an address owned by AS36352 HostPapa located in the United States. The SSL certificate associated with the host is identified as R11, a low‑trust issuance.

Reputation services assign extremely low scores: Gridinsoft reports a trust score of 0 / 100, while Scamadviser gives 1 / 100, and the domain is listed on a single security blocklist. VirusTotal analysis recorded two detections out of ninety‑three scanned engines, confirming that at least a small subset of security products recognize malicious behavior. The domain is also flagged by PhishDestroy and classified as a crypto‑related scam, specifically a brand‑impersonation campaign targeting the “across” brand.

Because the site is currently offline, active exploitation cannot be observed, but the combination of low trust metrics, malicious certificate, and detections suggests the domain was used to lure victims under the guise of a legitimate brand. Defenders should immediately block the domain and its associated IP address at perimeter filters, add the host to threat‑intel feeds, and monitor for any residual traffic or reuse of the infrastructure. Continuous observation of the registrar and hosting provider for similar patterns is advised, as the rapid creation‑to‑offline lifecycle is typical of opportunistic brand‑impersonation campaigns.