trustmining[.]live

Analysis of trustmining.live, observed on July 12, 2026, shows infrastructure consistent with a high‑risk generic phishing operation targeting cryptocurrency users. The domain was registered through OwnRegistrar, Inc. and resolves to IP address 192.3.190.186, which belongs to AS36352 HostPapa in the United States. An SSL certificate issued by Let’s Encrypt (YR1) is present, but the site returns an HTTP 302 redirect, suggesting deliberate traffic manipulation. The page title returned is "Trust Mining - Home" and the site incorporates Three.js, YouTube, Bootstrap, LiteSpeed, Smartsupp, OWL Carousel, Modernizr, and jQuery UI, indicating a relatively complex front‑end stack. Nameservers dns1.webproserver.com and dns2.webproserver.com host the domain. Threat intelligence records show that PhishDestroy has blocked the domain and it appears on one security blocklist; Gridinsoft assigns a trust score of 0 / 100. VirusTotal scans report 4 of 95 security vendors flagging the domain as malicious. The observed scam type is cryptocurrency, but the exact payload or victim interaction details remain unverified. Defenders should add trustmining.live to deny‑list rules, monitor outbound connections to its IP, and enforce TLS inspection despite the Let’s Encrypt certificate. Continuous observation is advised to capture any evolution of payload delivery or credential harvesting mechanisms.