trusted-sun[.]org

This domain, trusted-sun.org, was registered on July 22, 2026 through Fewmoretaps OU d/b/a Trustname.com and is currently active. The domain resolves to the IP address 188.114.97.3, which belongs to the Cloudflare network and is commonly used for rapid deployment of malicious infrastructure. Its authoritative nameservers are karina.ns.cloudflare.com and kayden.ns.cloudflare.com, indicating that the operator is leveraging Cloudflare’s DNS service. The domain appears on one security blocklist; the blocklist entry is recorded by PhishDestroy, which classifies the site as part of a credential‑harvesting campaign.

VirusTotal has scanned the domain with 91 commercial antivirus and URL‑reputation engines; none of the scanners raised a detection, but the absence of a flag does not constitute evidence of safety. No public page title, SSL certificate details, or HTTP response codes have been published, so the exact content and the vector used to lure victims remain unknown. The short interval between registration (July 22) and the first blocklist appearance suggests a fast‑track phishing operation, possibly targeting users of a trusted‑looking brand, although no specific brand is identified in the available data. Defenders should treat the domain as malicious until further analysis clarifies its payload.

Recommended actions include adding the domain and its IP address to local blocklists, monitoring DNS queries for the Cloudflare nameservers, and employing URL filtering to prevent user access. Continuous re‑scanning on VirusTotal and other sandboxes is advised to capture any delayed payload delivery. The investigation remains open, and any new artifacts should be correlated with this indicator set.