truistglobal[.]com

On July 24, 2026, the domain truistglobal.com was identified as a credential phishing domain. The domain resolves to the IP address 173.0.59.106, which is located in the United States and hosted by Wowrack.com. Google Safe Browsing has flagged this domain for social engineering, indicating a high risk of phishing attacks. The domain is registered through Global Domain Group LLC and was created on March 16, 2026. Infrastructure analysis reveals that the nameservers ns1.yougoserver.com and ns2.yougoserver.com are associated with the domain.

The MX records point to truistglobal.com with a priority of 0, suggesting that the domain might be attempting to process email traffic, which is a common tactic in credential phishing operations to intercept or manipulate emails. The SSL certificate for this domain is issued by Let's Encrypt, which can be used to gain user trust by displaying a secure connection in the browser. However, the presence of a valid SSL certificate does not guarantee the legitimacy of the website. This domain appears on one security blocklist and is currently blocked by PhishDestroy, a reputable security solution.

The current status of the domain is offline, which may indicate that the phishing operation has been disrupted or taken down. Despite the domain being offline, past activity and the high risk level suggest that it should still be considered a significant threat. Defenders should ensure that their systems and users are aware of this domain and take appropriate measures to prevent any accidental interactions. Monitoring the domain for any signs of reactivation is also recommended, as attackers often reuse infrastructure to launch new campaigns.