trustpayss[.]com

PhishDestroy identifies trustpayss.com as an active fake payment portal domain currently under investigation for phishing activities. This domain poses a significant risk due to its deceptive branding and potential to harvest financial credentials. Users are urged to avoid interactions until further analysis is complete.

This domain exhibits several technical indicators of malicious intent. VirusTotal currently shows 0 detections out of 95 security engines, indicating low immediate recognition despite its suspicious nature. trustpayss.com resolves to the IP address 68.65.121.170, which is registered under Hello Internet Corp and associated with a Sectigo Limited SSL certificate—factors that could mislead users into trusting the site. The domain was registered on February 26, 2026, suggesting a very recent and potentially opportunistic creation. No known blocklists currently flag this domain, and threat intelligence platforms have not yet assigned it a reputation score.

To mitigate exposure to this fake payment portal scam, organizations and individuals should immediately block trustpayss.com at the DNS and firewall levels. Users who may have already visited the site should avoid entering any payment or login credentials and should check for signs of credential theft or malware. Administrators should monitor network traffic for connections to 68.65.121.170 and inspect endpoints for suspicious outbound communication. Given the low detection rate on VirusTotal, proactive hunting for IoCs related to this domain and associated infrastructure is strongly recommended. A full risk assessment, including sandbox analysis of the website’s behavior, is advised before lifting any mitigations.