signalstacktrend[.]live

This domain, signalstacktrend.live, is actively flagged as a high-risk Messenger phishing operation. Registered on March 4, 2026, through Global Domain Group LLC, the site remains accessible as of July 12, 2026, returning an HTTP 200 status. Infrastructure analysis reveals the domain resolves to 192.142.10.129, hosted on AS214036 (Ultahost, Inc.) in the Netherlands. Nameservers point to pro1.ecositewebhost.com and pro2.ecositewebhost.com, while the SSL certificate is issued by Let's Encrypt under the R13 intermediate. The page title, 'signalstacktrend,' provides no legitimate branding context, reinforcing its classification as a fraudulent endpoint targeting messaging platforms. Security vendors have detected malicious activity associated with this domain, with 7 out of 95 engines on VirusTotal flagging it as harmful. Additionally, it appears on three distinct security blocklists, including PhishDestroy, MetaMask, and SEAL, which specifically categorize it as a Messenger phishing threat. The Gridinsoft trust score of 0/100 further corroborates its high-risk status. While the exact phishing kit or lure mechanism remains unconfirmed, the domain's infrastructure and detection patterns align with known Messenger-based credential harvesting campaigns. Defenders should treat this domain as an active threat. Network-level blocking of 192.142.10.129 and associated nameservers is recommended to prevent user exposure. Organizations using messaging platforms should monitor for unusual login attempts or credential submissions originating from this domain. Given its recent registration and persistent activity, signalstacktrend.live is likely part of a broader, evolving phishing campaign. No legitimate business or service appears to be associated with this infrastructure, and its continued operation suggests ongoing malicious intent.