Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@whiteprivacy.com.
The latest stored availability evidence still shows the domain reachable; 1 month has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
trust-globalunion[.]online
“Trust Global Union Bank”
This domain, trust-globalunion.online, is identified as a high-risk generic phishing site actively impersonating UnionPay, a global payment network. The site is designed to harvest login credentials, payment details, and personal information from victims under the guise of a legitimate financial service portal. As of the latest analysis, the domain remains operational and poses a significant threat to users unaware of its fraudulent nature. Analysis of the domain reveals critical technical indicators. The domain was registered on September 24, 2025, through Global Domain Group LLC and currently resolves to the IP address 163.61.188.2. VirusTotal reports indicate that 5 out of 95 security vendors have flagged this domain as malicious, with detections focusing on phishing and fraudulent payment activity. The SSL certificate is issued by Let's Encrypt, which, while providing encryption, does not validate the legitimacy of the site. Infrastructure analysis further shows no association with UnionPay's official network, confirming its impersonation status. The domain remains active and continues to host its phishing infrastructure. Organizations and users are advised to block traffic to 163.61.188.2 and implement DNS-based filtering for trust-globalunion.online. Endpoint protection solutions should be updated to include this domain in their blocklists. Users who may have interacted with the site should immediately reset credentials for any financial or personal accounts accessed during the exposure window. Monitoring for unauthorized transactions and enabling multi-factor authentication on all critical accounts is strongly recommended to mitigate potential compromise.
Threat Response Pipeline
Public Blocklist Status
Stored Capture
Domain Intelligence
Technical detailsDNS, SSL SANs, timestamps
ICANN OVERSIGHT
Accreditation and RAA context
Accreditation and RAA context
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Technologies · 7 identified
YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.
www.youtube.com 100% confidenceBootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.
getbootstrap.com 100% confidenceOWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.
owlcarousel2.github.io 100% confidencejQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.
jquery.com 100% confidencePopper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.
popper.js.org 100% confidenceHTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 100% confidenceVirusTotal Analysis
Site Performance Analysis
Google PageSpeed Insights — mobile performance audit of trust-globalunion.online · checked Jun 26, 2026
Evidence & External Reports
PD-20260626-002B9B Recipient: abuse@whiteprivacy.com Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive