trustalabs[.]pro

Analysis as of July 24, 2026 indicates that the domain trustalabs.pro, registered on February 21, 2026, is currently offline but was previously associated with a Binance brand impersonation campaign. DNS resolution points to IP 185.214.74.84, which belongs to the NL‑based ASN 215540 (Global Connectivity Solutions LLP). The hosting infrastructure is therefore traceable to a Dutch network operator. The site's SSL certificate is identified as rating R11, and a Gridinsoft trust score of 0/100 reflects a malicious classification.

VirusTotal results show that 2 of 93 scanning engines flagged the domain, and the domain appears on two public blocklists operated by PhishDestroy and ScamSniffer. AlienVault OTX lists the domain in one threat‑intelligence pulse, confirming its presence in broader threat‑sharing feeds. The page title returned from the HTTP response is “Trustlabs AI”, providing no direct indication of the malicious payload but confirming the existence of a web service at the time of capture. The campaign is labeled as a crypto scam, specifically targeting Binance users, though the exact phishing page content has not been disclosed.

Defenders should block the resolved IP address and the domain at perimeter filters, add trustalabs.pro to internal blacklists, and monitor for newly registered domains that resolve to the same ASN or exhibit similar SSL characteristics. Ongoing watch‑list updates from PhishDestroy, ScamSniffer, and OTX are recommended to capture any re‑activation attempts. Because the site is offline, active takedown verification is limited, but the historical indicators suggest a high likelihood of credential harvesting aimed at Binance accounts.