trustnetstock[.]online

The domain trustnetstock.online has been identified as a credential harvesting phishing site targeting users of financial or investment platforms. Analysis indicates the site is designed to impersonate legitimate stock trading or financial services to collect sensitive login credentials, payment details, or personal information. As of the latest assessment, the domain is currently offline, though prior activity suggests it was actively serving phishing content. Infrastructure analysis reveals the domain was registered on May 18, 2024, through HOSTINGER operations, UAB, and resolves to the IP address 198.251.89.229. It is flagged by 6 of 95 security vendors on VirusTotal and appears on two distinct security blocklists, including PhishDestroy and OISD. The domain holds a Scamadviser trust score of 24 out of 100 and a Gridinsoft trust score of 0 out of 100, reflecting its high-risk classification. Detected technologies include PHP, Bootstrap, LiteSpeed, Swiper, Slick, jQuery UI, and jQuery, alongside HTTP/3 support, which may be leveraged to enhance the site's perceived legitimacy or evade detection. The domain's current offline status does not eliminate the risk, as phishing infrastructure can be reactivated or repurposed. Organizations and users are advised to block the domain and its associated IP address (198.251.89.229) at the network level. Security teams should monitor for related indicators of compromise, including SSL certificates issued by Let's Encrypt for this domain. End-users who may have interacted with the site should reset credentials for any financial or sensitive accounts and enable multi-factor authentication where available. Proactive threat hunting for similar domains registered through the same registrar or resolving to the same IP range is recommended.