trust-in[.]fun

trust-in.fun is currently listed as offline but remains of interest due to its recent registration and detection profile. The domain was created on 11 March 2026 and is registered through PDR Ltd. d/b/a PublicDomainRegistry.com. DNS resolution points to 188.114.97.3, an IP address owned by Cloudflare, Inc. (AS13335) located in the United States. The domain is served behind Cloudflare’s service stack, with HSTS, Cloudflare Browser Insights and HTTP/3 observed, but no SSL certificate was presented during the brief scan, indicating either a misconfiguration or an intentional omission. The page title returned by the HTTP response is “Just a moment…”, which provides no substantive content and suggests the site may have been serving a temporary interstitial or was in a takedown state when queried.

Two of ninety‑four VirusTotal scanners flagged the domain, and it appears on the PhishDestroy and ScamSniffer blocklists, confirming that external threat‑intelligence feeds have identified it as malicious. No additional analysis of the page content, brand targeting, or phishing kit was available, leaving the exact payload or victim‑interaction vector unknown. The lack of an active SSL certificate together with the generic page title could indicate a placeholder page used before deployment of a phishing front‑end. For defenders, the immediate actionable steps are to ensure that the IP address 188.114.97.3 is blocked at the network perimeter, although the address is shared by many legitimate Cloudflare customers, so contextual filtering based on DNS queries for trust‑in.fun is recommended.

Adding the domain to local deny lists, web‑proxy rules, and endpoint URL filtering will prevent accidental navigation. Continuous monitoring of the domain’s DNS records is advised, as the Cloudflare front‑end could be repointed to a new malicious host if the operators reactivate the site.