microtrend-micro[.]us

Analysis of microtrend-micro.us shows it was registered on 21 February 2026 through ENOM, INC. The domain resolves to the IP address 23.254.240.243, which is assigned to AS54290 Hostwinds LLC and geolocated to the United States. No TLS certificate is presented; the site was served without HTTPS. The page title returned by the server is "Trend Micro - Login & Download Your Trend Micro - Trend", indicating an attempt to impersonate Trend Micro for credential harvesting. The hosting provider’s nameservers are ns61.hostwindsdns.com and ns62.hostwindsdns.com.

The domain is currently taken offline, but during its active period it appeared on three public blocklists and was explicitly blocked by PhishDestroy, MetaMask, and SEAL. Gridinsoft assigns a trust score of 0 out of 100, reflecting a high confidence of malicious intent. VirusTotal reports that nine of ninety‑three scanned scanners flagged the domain, reinforcing the phishing classification. Defenders should treat any traffic to microtrend-micro.us as hostile.

The lack of SSL, combined with the observed page title and the low trust score, suggests credential collection targeting Trend Micro users. Preventive measures include adding the domain to deny‑list rules at perimeter firewalls and proxy devices, ensuring DNS resolvers block the associated IP and nameservers, and monitoring for any resurgence of the domain or related sub‑domains. Because the site is offline, ongoing observation of the hosting ASN and the registrar’s future registrations is advisable to detect potential re‑use of the same infrastructure. No additional evidence such as Safe Browsing or OTX identifiers is available, so conclusions rely on the listed indicators.