go-trust[.]co[.]com

The domain go-trust.co.com is currently listed as offline but continues to appear on multiple security blocklists. Infrastructure analysis shows it resolves to the IPv4 address 80.64.19.62, which is registered to AS48031 in Poland and attributed to Ivanov Vitaliy Sergeevich. The domain was originally created on August 16, 1997 and is registered through Moniker Online Services LLC. Authoritative nameservers are ns1.nic.co.com, ns2.nic.co.com, ns3.nic.co.com, and ns4.nic.co.com. No TLS certificate is presented for the host, and an HTTP request returns the page title “go‑trust.co.com is for sale | HugeDomains”, indicating a parked or resale page rather than active phishing content.

Despite the lack of visible malicious payload, the domain is flagged by four independent blocklists and is actively blocked by security products including PhishDestroy, Polkadot, Enkrypt, and Codeesura. VirusTotal analysis reports that 16 of 95 scanned security vendors have generated a detection for the domain, reinforcing its classification as a high‑risk phishing indicator. The presence on multiple blocklists, combined with the absence of encryption and the parked‑page title, suggests the domain is being used as a lure or may be re‑activated for credential‑harvesting campaigns.

Uncertainty remains regarding any current hosting of malicious pages, as the site is offline at the time of reporting. Defenders should continue to deny traffic to 80.64.19.62, add go‑trust.co.com to internal blocklists, monitor DNS queries for future resolution changes, and consider sinkholing the address to disrupt potential re‑use. Ongoing observation of the domain’s registration and hosting details is advised to detect any shift from a parked state to active phishing deployment.