# trip74.ac — SUSPICIOUS

> trip74.ac involved in credential theft phishing, created April 2026. SSL by Let's Encrypt, 0/95 VT detections. Check the full report.

## Summary
The domain trip74.ac poses a credential theft phishing risk, aiming to deceive users into revealing sensitive login information. Such fraudulent sites mimic legitimate services to trick visitors into submitting usernames, passwords, or other private data, potentially leading to identity theft or financial loss. This threat is active and remains under investigation to determine its full scope and impact.

PhishDestroy's analysis reveals that trip74.ac was registered recently on April 04, 2026, through Immaterialism Limited, a registrar sometimes used by threat actors to mask malicious activities. The domain’s SSL certificate is issued by Let’s Encrypt, which, while common and legitimate, can also be used by attackers to lend false legitimacy. VirusTotal scans show zero detections out of 95 antivirus engines, indicating the site is either new or employs advanced evasion techniques. The domain resolves to the IP address 185.130.47.48, a technical detail valuable for network defense and blocking efforts.

If you have visited trip74.ac, it is crucial to avoid entering any personal information and to monitor your accounts for suspicious activity. Immediately change passwords linked to accounts that may have been compromised, especially if you used the same credentials elsewhere. Enable two-factor authentication where possible to add an additional layer of security. Remain cautious of unsolicited emails or messages containing links and verify URLs before clicking. Reporting this domain to your IT department or security provider helps contain the threat and protect others from potential harm.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-04-04 16:15:40
- Registrar: Immaterialism Limited
- IP: 185.130.47.48

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/trip74.ac
- PhishDestroy: https://phishdestroy.io/domain/trip74.ac/
- LLM endpoint: https://phishdestroy.io/domain/trip74.ac/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/trip74.ac/
Last updated: 2026-04-08