trustsmontreal[.]com

The domain trustsmontreal.com is currently listed as an active generic phishing infrastructure. Automated scans on VirusTotal have returned detections from 13 of 91 security vendors, indicating that multiple anti‑malware engines have identified malicious behavior associated with the host. The domain also appears on a single external security blocklist and is actively blocked by the PhishDestroy mitigation service.

No public information has been released regarding the registrar, registration date, ASN, hosting provider, or geographic location of the underlying IP address, and no SSL certificate details, HTTP response codes, or page‑title metadata have been observed in the available intelligence. Consequently, the full scope of the phishing campaign—including the specific brand being impersonated, the credential‑capture mechanism, and any associated command‑and‑control endpoints—remains unknown. Defenders should treat any traffic to or from trustsmontreal.com as malicious.

Immediate actions include adding the domain to network firewalls, DNS filtering, and endpoint allow‑list exclusions, as well as enabling URL filtering rules that reference the blocklist entry and the PhishDestroy block. Continuous monitoring of DNS queries and outbound connections for the domain is recommended, and any observed attempts should be logged and investigated. Organizations should also consider sharing any newly discovered artifacts with threat‑intel communities to enrich the collective understanding of this infrastructure.