Перевірка домену trust-app.co.com на фішинг і безпеку

The domain trust-app.co.com was observed hosting a page whose title resolved to "app.www.trust-app.co.com". The site was intercepted by the PhishDestroy filtering service and appears on a single security blocklist. VirusTotal analysis recorded twelve detections out of ninety‑five scanned engines, indicating that a notable minority of scanners identified malicious behavior. DNS resolution points to the IPv4 address 185.111.111.154, which is announced by the autonomous system AS212238, registered to Datacamp Limited in Germany.

The authoritative name servers for the zone are coco.bunny.net and kiki.bunny.net, both typical of fast‑hosting providers. Registration was performed through the CDNEXT_FRA registrar, and the associated ASN is 212238. No TLS certificate was presented for the host, meaning connections are unencrypted and vulnerable to interception. A Gridinsoft trust score of zero out of one hundred reinforces the assessment that the domain lacks any reputable reputation.

Current monitoring shows the host is taken offline, but historical evidence suggests it was used for a generic phishing campaign. The exact content of the page, including any credential‑capture forms or targeted brand impersonation, has not been publicly disclosed, leaving the precise phishing vector uncertain. Defenders should continue to block the domain at network perimeters, update URL filtering policies to include the observed host and its IP address, and monitor the associated name servers for any future re‑use. Threat intel feeds should be enriched with the observed detection count, registrar details, and hosting ASN to aid correlation with other campaigns that may leverage the same infrastructure.