trusttrader[.]app

Analysis conducted on July 25, 2026 identifies trusttrader.app as a phishing‑related infrastructure that has been taken offline. The domain was registered through Porkbun LLC on February 21, 2026 and resolves to the IP address 75.2.60.5, which is assigned to Amazon.com, Inc. (AS16509) in the United States. DNS resolution uses Porkbun‑hosted nameservers curitiba.ns.porkbun.com, fortaleza.ns.porkbun.com, and maceio.ns.porkbun.com.

A TLS certificate issued by Let’s Encrypt (certificate identifier E8) is present, indicating HTTPS support, yet an HTTP request returns a 404 status with the page title "Site not found." Automated scanning on VirusTotal involved 95 antivirus and URL‑reputation engines, none of which flagged the domain, a fact that does not constitute a safety assurance. Technical profiling discovered Netlify as the underlying hosting technology, and the domain appears on a single security blocklist, where it is also listed by the PhishDestroy filtering service. No additional malicious payloads, credential‑stealing pages, or brand‑specific impersonation artifacts have been observed in the limited snapshot.

The lack of active content prevents definitive attribution of the phishing campaign’s target or vector, rendering the precise threat scope uncertain. Defenders are advised to continue blocking trusttrader.app at network perimeter and DNS layers, monitor any resurgence of activity, and incorporate the domain’s IP and nameserver data into threat‑intel feeds. Ongoing vigilance is recommended given the recent creation date and the potential for reuse in future phishing campaigns.