transactsureauthoritys[.]world

Analysis of transactsureauthoritys.world shows a live web presence serving a page titled “Transact Sure Authority”. The site resolves to IP 192.3.190.186, hosted in the United States under ASN 36352 (HostPapa) and delivers content over HTTPS using a Let’s Encrypt R12 certificate. DNS is provided by dns1.webproserver.com and dns2.webproserver.com, and the domain’s MX record points to itself with priority 0, a pattern often used by malicious actors to control inbound mail. A scan on VirusTotal returned 11 detections out of 95 security vendors, indicating that multiple engines flag the domain as malicious. The site employs common web frameworks and libraries—including Bootstrap, jQuery, Slick, OWL Carousel, Smartsupp, LiteSpeed, and HTTP/3—technologies that are frequently leveraged to mimic legitimate sites and to host tracking scripts. Gridinsoft’s trust score of 0/100 and inclusion on a security blocklist, together with a block by PhishDestroy, reinforce the high‑risk assessment. While the page title suggests an attempt to impersonate an authority figure, the actual page content has not been disclosed, leaving the precise phishing vector uncertain. Defenders should add the domain to URL filtering lists, enforce sink‑hole routing for the resolved IP, and monitor email traffic for the self‑referencing MX record. Continuous re‑scanning is recommended to capture any changes to the payload or hosting infrastructure.