flrasset-trustline[.]org

The domain flrasset-trustline.org was created on 27 July 2025 through Dynadot LLC. It resolves to the IPv4 address 192.3.141.253, which is hosted by HostPapa under ASN 36352 in the United States. No TLS certificate is presented, meaning the site is served over plain HTTP only; this lack of encryption allows any submitted credentials to be transmitted in clear text, a pattern frequently leveraged in credential‑stealing campaigns. The only observed page title is “Connect”, and no further page content analysis is available, leaving the exact phishing lure unconfirmed. Reputation services flag the domain as highly suspicious: Gridinsoft assigns a trust score of 0 / 100, Scamadviser reports a score of 1 / 100, and the domain appears on five security blocklists.

Independent blocklist providers PhishDestroy, ScamSniffer, Polkadot, Enkrypt, and Codeesura have all listed the domain as malicious, confirming its inclusion in active mitigation feeds. On the AlienVault Open Threat Exchange the domain is referenced in a single threat‑intel pulse, reinforcing its association with phishing campaigns. VirusTotal scans show that 13 of 95 antivirus engines flag the domain as malicious, further corroborating the high‑risk rating.

The current operational status is offline, yet the aggregation of these indicators warrants a high risk classification. Defenders should block DNS resolution for flrasset-trustline.org at the resolver level, deny outbound traffic to 192.3.141.253, and scrutinize any email or web content referencing the “Connect” title for potential credential harvesting. Ongoing monitoring of the HostPapa hosting environment and the Dynadot registrar for re‑registration attempts is advised, as is periodic re‑query of threat‑intel feeds to capture any resurgence of the infrastructure.