expert-investz[.]xyz

The domain expert-investz.xyz was registered on 26 February 2026 through Cosmotown Inc and resolves to the IPv4 address 84.32.84.32, which is part of AS47583 owned by Hostinger International Limited and geolocated to Lithuania. No TLS certificate is presented, indicating that the site is served only over HTTP. The authoritative nameservers are ns1.dns-parking.com and ns2.dns-parking.com, typical of parked or low‑cost hosting services. The page title returned by the server is “Home”, and the site has been classified as an investment‑scam phishing domain.

VirusTotal scans show that ten of ninety‑three security engines flagged the domain as malicious, and the domain appears on three external blocklists, including PhishDestroy, MetaMask, and SEAL. The domain is currently taken offline, but historical evidence suggests it was used to lure victims with investment promises. Because the infrastructure uses a generic hosting provider and lacks SSL, the risk of credential or financial data capture is high.

Defenders should block the domain at the DNS and firewall levels, add the IP address 84.32.84.32 to network deny lists, and monitor for any future re‑registration or similar domains using the same registrar or hosting ASN. Additional analysis should focus on any captured HTTP requests, payloads, or redirects that may reveal the phishing kit or victim targeting patterns. Until further forensic artifacts become available, the domain should be treated as a high‑confidence malicious resource.