unionsxtrusts[.]com

This domain is identified as an active credential harvesting phishing site designed to mimic legitimate financial or union trust services. Analysis indicates it presents a fraudulent login interface under the page title 'Unionsxtrusts,' likely intended to deceive users into submitting sensitive account details such as usernames, passwords, or financial credentials. The site poses a direct risk of account compromise, unauthorized transactions, or identity theft for individuals who interact with it. Infrastructure analysis reveals multiple technical indicators confirming its malicious nature. The domain was registered on July 13, 2025, through Dynadot Inc, an unusually recent creation date for a purported trust service. It resolves to the IP address 163.61.188.7 and uses a Let's Encrypt SSL certificate to appear secure. Security vendor detections include 2 out of 95 engines on VirusTotal flagging the domain as malicious, and it appears on one security blocklist. Additionally, the domain has been documented in one threat intelligence pulse on a public threat exchange platform, with a trust score of 0/100 from independent analysis. Users who have visited unionsxtrusts.com or entered credentials on the site should take immediate action. Disconnect the device from the network to prevent potential data exfiltration. Change all passwords for financial, email, and other sensitive accounts using a separate, secure device. Enable multi-factor authentication where available. Monitor accounts for unauthorized activity and report any suspicious transactions to the relevant financial institution. Consider running a full antivirus scan to detect any malware that may have been installed during the interaction. If personal or financial information was submitted, notify credit bureaus and consider placing a fraud alert on credit reports.