ecostrems[.]pro

On 24 July 2026 analysts observed that the domain ecostrems.pro is currently offline but retains characteristics of a brand‑impersonation infrastructure targeting the brand “across”. The domain was registered through NameSilo, LLC on 27 June 2025 and resolves to the IPv4 address 192.3.141.252, which is assigned to AS36352 (HostPapa) in the United States. No SSL certificate is presented for the host, and HTTP requests return no content because the site has been taken offline. The page title that was captured before takedown reads “ECO Strems”, which does not directly reference the impersonated brand, indicating that the landing page may have been a generic placeholder or a mis‑spelled version of a legitimate service.

Reputation services rate the domain extremely poorly: Scamadviser assigns a trust score of 1 out of 100, Gridinsoft reports a score of 0 out of 100, and the domain appears on a single security blocklist. VirusTotal analysis shows that six of ninety‑five scanning engines flagged the domain, reinforcing the suspicion of malicious intent. PhishDestroy has also added ecostrems.pro to its blocklist, confirming that it was identified as a phishing source.

The combination of a recent registration date, low‑reputation scores, hosting on a shared provider, lack of TLS, and multiple vendor detections suggests a deliberate attempt to lure victims by masquerading as the “across” brand. Defenders should continue to block the domain at perimeter filters, monitor DNS queries for the 192.3.141.252 address, and add the domain to internal threat‑intel feeds. Because the site is offline, any active payload delivery is likely paused, but the infrastructure could be re‑activated under a different sub‑domain or host, so ongoing surveillance is recommended.