trustpaycapital[.]com

trustpaycapital.com was registered on October 04, 2024 through Key-Systems GmbH and is currently hosted on the IP address 46.183.27.159. The domain is resolvable and remains active as of the report date, July 27, 2026. It is listed on a single security blocklist and is actively blocked by PhishDestroy, indicating that at least one phishing mitigation service has identified it as malicious. VirusTotal scans show that 11 of 91 security vendors flag the domain, providing additional corroboration of its malicious nature.

The authoritative name servers are dns1.thekinsmenservers.com and dns2.thekinsmenservers.com, which are consistent with the hosting infrastructure observed for other recent phishing campaigns. No public SSL certificate details, HTTP status codes, or page title information have been disclosed, so the exact content served by the site cannot be confirmed at this time. The available evidence points to a generic phishing operation, but the specific lures, target brands, or credential‑stealing mechanisms have not been publicly documented.

Defenders should add 46.183.27.159 to network‑level blocklists, enforce DNS filtering for trustpaycapital.com, and monitor outbound traffic for connections to the identified nameservers. Email gateways should be configured to flag or quarantine messages that contain URLs or links to this domain. Continuous re‑scanning with multi‑vendor scanners is recommended to capture any changes in detection rates, and any newly observed indicators of compromise should be shared with threat‑intel sharing platforms.