travenziolaro[.]net

Analysis of travenziolaro.net, created on February 21 2026 and currently taken offline, shows infrastructure consistent with a cloud‑hosted malicious site. The domain resolves to 172.67.223.199, an address owned by AS13335 Cloudflare, Inc. in the United States, and is delegated to Cloudflare name servers howard.ns.cloudflare.com and naomi.ns.cloudflare.com. No TLS certificate is presented, indicating the site was served without HTTPS protection. The page title retrieved before takedown, "Learn about modern financial technologies and education," does not directly reference the targeted brand, yet the domain is classified as impersonating the brand "across" and labeled as an investment scam in the intelligence feed.

Trust scoring from Gridinsoft rates the domain at 0 out of 100, reflecting a high likelihood of malicious intent. The domain appears on three security blocklists—PhishDestroy, MetaMask, and SEAL—demonstrating that multiple threat‑intelligence providers have already flagged it. VirusTotal scans reported two of ninety‑three security vendors flagging the domain, providing additional corroboration of suspicious activity. Registration was performed through Spaceship, Inc., a registrar often used for fast‑flux or disposable domains.

Defenders should add travenziolaro.net to internal deny lists, enforce DNS sink‑holing for the resolved IP, and monitor for any resurgence of the domain or similarly structured names targeting the Across brand. Email security gateways should be updated to block URLs containing the domain and to flag messages that reference the page title content. Continuous monitoring of Cloudflare‑hosted IP ranges for new domains registered under the same registrar may help detect future campaigns that reuse this hosting pattern.