# d.gettrustpayment.live — SUSPICIOUS

> Dangerous phishing site at gettrustpayment.live mimics payment pages. Only 0/95 VirusTotal detections. Check the full report.

## Summary
PhishDestroy identifies gettrustpayment.live as a live payment-themed phishing domain designed to steal financial credentials and personal information from unsuspecting users. This fraudulent site masquerades as a legitimate payment verification page, tricking visitors into entering sensitive card details or login credentials under the false pretense of resolving a payment issue. The domain leverages urgency-based social engineering, such as fake transaction alerts or account suspension warnings, to pressure users into submitting data without scrutiny. While currently undetected by most antivirus engines, its active status and deceptive branding make it a serious threat to online shoppers and banking customers.  This domain was flagged by PhishDestroy using seed bfa3e2, with zero detections across 95 VirusTotal engines as of the latest scan. Registered through an anonymous registrar, the site operates under Let's Encrypt SSL certificate (valid for phishing purposes) resolving to IP address 185.246.190.216, hosted in a high-risk network segment. The domain is newly active, indicating a rapidly deployed campaign likely targeting recent events such as seasonal sales or tax deadlines to maximize victim engagement. Its lack of detection reflects either stealth tactics or a newly launched operation.  If you visited gettrustpayment.live, immediately stop entering any personal or financial information. Do not click any links or download files from the site. Disconnect from the internet if possible and run a full antivirus scan. Change passwords for any accounts you may have entered, especially banking or email credentials. Report the domain to your bank and local cybercrime unit. Monitor your financial statements for unauthorized transactions. Share this warning with others to prevent further victimization. Avoid reaccessing the domain—it remains active and dangerous.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: REGISTRAR_NOT_FOUND
- IP: 185.246.190.216

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/d.gettrustpayment.live
- PhishDestroy: https://phishdestroy.io/domain/d.gettrustpayment.live/
- LLM endpoint: https://phishdestroy.io/domain/d.gettrustpayment.live/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/d.gettrustpayment.live/
Last updated: 2026-04-04