treasurestrustdelivery[.]com

Analysis of treasurestrustdelivery.com as of 25 July 2026 indicates that the domain is actively hosting a delivery‑related scam infrastructure. The domain was registered on 21 February 2026 through OrangeHost LLC and resolves to the IPv4 address 209.172.2.60, which is announced by AS19853 operated by OrangeHost. The hosting provider is located in the United States. HTTP requests return status code 200 and the site negotiates HTTP/3, confirming modern protocol support. The TLS certificate is issued by Let’s Encrypt (R13) and is valid for the host name. The page title reported by crawlers is “Home - Treasure Trust Delivery”, suggesting the site presents itself as a delivery service, although the actual content has not been examined.

Reputation signals are overwhelmingly negative. Gridinsoft assigns a trust score of 0 out of 100, and the domain appears on a single security blocklist; it is explicitly listed by the PhishDestroy blocklist. VirusTotal scans show that one of ninety‑three scanning engines flagged the domain, providing additional confirmation of malicious intent. No other public blocklists or safe‑browsing services are noted in the available data. The observable indicators leave several open questions.

The specific scam kit, credential‑collection mechanisms, and any downstream command‑and‑control endpoints have not been disclosed. Likewise, the exact lure used in the delivery scam is not described in the current intelligence. Defenders should therefore treat any traffic to or from 209.172.2.60 as suspicious, enforce outbound filtering, and consider adding the domain and its IP to internal blocklists. Continuous monitoring of the certificate renewal status and of the HTTP/3 endpoint is recommended, as changes may signal a shift in the campaign’s tactics. Organizations that rely on legitimate delivery services should educate users about unexpected delivery‑related communications and encourage verification through official channels.