inttrustbox[.]info

inttrustbox.info was registered through NameSilo, LLC on 9 January 2026 and resolves to the IPv4 address 152.53.227.177. The authoritative name servers are ns5.da-manager.net and ns6.da-manager.net. The domain appears on a single security blocklist and is explicitly listed by PhishDestroy, indicating that at least one reputable anti‑phishing feed has classified it as malicious.

VirusTotal records show that the domain has been examined by 91 scanning vendors; none of those vendors reported a detection at the time of analysis, but the absence of a detection does not constitute a safety assurance. No public information is available regarding SSL certificates, HTTP response codes, page title, or any content‑based indicators, suggesting that those artifacts have not yet been harvested or disclosed. The limited visibility of the infrastructure combined with its recent creation date points to a likely short‑lived phishing operation, a pattern commonly observed in campaigns that rely on fast‑flux or disposable domains.

Defenders should consider adding the domain and its resolving IP address to outbound and inbound deny lists, monitor DNS queries for the listed name servers, and flag any traffic to the IP for deeper inspection. Continuous re‑scanning on platforms such as VirusTotal is recommended to capture any future payloads or changes in behavior. Because the domain is still active, threat‑hunters should also query open‑source intelligence feeds for any emerging reports that could provide additional context, such as phishing kit signatures or target brand associations that may be disclosed later.