d[.]gettrustpayment[.]live

PhishDestroy identifies gettrustpayment.live as a live payment-themed phishing domain designed to steal financial credentials and personal information from unsuspecting users. This fraudulent site masquerades as a legitimate payment verification page, tricking visitors into entering sensitive card details or login credentials under the false pretense of resolving a payment issue. The domain leverages urgency-based social engineering, such as fake transaction alerts or account suspension warnings, to pressure users into submitting data without scrutiny. While currently undetected by most antivirus engines, its active status and deceptive branding make it a serious threat to online shoppers and banking customers. This domain was flagged by PhishDestroy using seed bfa3e2, with zero detections across 95 VirusTotal engines as of the latest scan. Registered through an anonymous registrar, the site operates under Let's Encrypt SSL certificate (valid for phishing purposes) resolving to IP address 185.246.190.216, hosted in a high-risk network segment. The domain is newly active, indicating a rapidly deployed campaign likely targeting recent events such as seasonal sales or tax deadlines to maximize victim engagement. Its lack of detection reflects either stealth tactics or a newly launched operation. If you visited gettrustpayment.live, immediately stop entering any personal or financial information. Do not click any links or download files from the site. Disconnect from the internet if possible and run a full antivirus scan. Change passwords for any accounts you may have entered, especially banking or email credentials. Report the domain to your bank and local cybercrime unit. Monitor your financial statements for unauthorized transactions. Share this warning with others to prevent further victimization. Avoid reaccessing the domain—it remains active and dangerous.