trust-app[.]io

trust-app.io was observed as a high‑risk generic phishing site. The domain was registered on 21 February 2026 through Hosting Concepts B.V. operating under the Registrar.eu brand. DNS resolution points to the single IPv4 address 45.93.20.38, which geolocates to Hong Kong and is served by OpenProvider infrastructure, as indicated by the three nameservers ns1.openprovider.nl, ns2.openprovider.be and ns3.openprovider.eu. No TLS certificate is presented, and HTTP requests return the default Cloudflare challenge page with the title “Attention Required!

| Cloudflare”. The site has been taken offline at the time of analysis, but historic data show it was listed on three security blocklists and is currently blocked by PhishDestroy, MetaMask and SEAL. VirusTotal scans recorded fifteen positive detections out of ninety‑three scanners, confirming that multiple security vendors consider the domain malicious. The lack of an active SSL certificate, combined with the Cloudflare challenge page, suggests the operators relied on the CDN’s protection to hide the underlying payload while the site was active.

Because the domain is no longer reachable, investigators cannot retrieve additional payload or landing‑page content, leaving the exact phishing vector and targeted credentials uncertain. Defenders should continue to block any DNS resolution to 45.93.20.38, include trust‑app.io in URL filtering policies, and monitor for re‑registration or similar domains that reuse the same OpenProvider nameserver pattern. Ongoing threat‑intel feeds should be consulted for any resurgence, and any internal alerts that reference the domain should be investigated for potential compromised credentials.