trust-io-wallt[.]pages[.]dev

trust-io-wallt.pages.dev was registered on 2025-11-07 through Cloudflare Pages, a service that provides static site hosting behind Cloudflare’s edge network. The domain resolves to the IP address 188.114.96.3, which is owned by the Cloudflare network and is commonly used for legitimate as well as malicious content. The domain appears on a single security blocklist and has been actively blocked by the PhishDestroy sink‑hole, indicating that at least one defensive platform has observed malicious traffic associated with the host.

VirusTotal records show that the domain was submitted to the scanning service and examined by 91 independent vendors; none of the vendors raised a detection at the time of analysis. While the absence of a vendor flag does not constitute proof of safety, the combination of recent creation, reliance on Cloudflare Pages, presence on a blocklist, and active blocking by PhishDestroy collectively suggest that the infrastructure is being leveraged for phishing operations. No public Safe Browsing, Open Threat Exchange, SSL certificate, HTTP response, page title, or additional evidence links were available in the current data set, leaving the exact content and targeted brand of the site unknown.

Defenders should treat the domain as high‑risk until further forensic evidence is obtained. Recommended actions include adding the domain to outbound and inbound deny lists, monitoring DNS queries for the 188.114.96.3 address, and employing URL filtering solutions that reference the known blocklist entry. Continuous re‑assessment is advised, as the infrastructure may evolve or new detections may emerge.