trips76[.]info

Analysis of trips76.info, first observed on July 20, 2026, indicates that the domain was registered on July 16, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and is currently resolved to the IP address 104.21.29.114. The domain is hosted on Cloudflare infrastructure, as evidenced by its authoritative nameservers june.ns.cloudflare.com and vicky.ns.cloudflare.com. VirusTotal records show that the domain has been scanned by 91 security vendors, none of which reported a detection at the time of analysis; this absence of detections does not constitute a safety guarantee. Independent threat intelligence sources have classified the site as a generic phishing campaign and have placed it on a single security blocklist. Additionally, the PhishDestroy service has actively blocked the domain, suggesting that it is recognized as malicious by at least one dedicated anti‑phishing platform. No public information is available regarding SSL certificate details, HTTP response codes, page title, or any brand targeting, leaving the content and exact phishing vector unverified. Given the recent creation date, active resolution, and inclusion on a blocklist, defenders should treat trips76.info as a high‑confidence malicious indicator. Recommended actions include adding the domain to outbound and inbound filtering rules, monitoring DNS queries for the associated IP, and employing URL‑filtering solutions to block access. Continuous re‑evaluation is advised, as future scans or threat intel updates may provide additional context or detection signals.