checktrust[.]top

The domain checktrust.top is currently active and has been classified as a credential phishing site. Infrastructure analysis shows the domain resolves to IP address 104.21.44.47, which is hosted by Cloudflare (AS13335) in the United States. The authoritative nameservers are jill.ns.cloudflare.com. and noel.ns.cloudflare.com., and the site presents a Let’s Encrypt/E7 TLS certificate, indicating a valid HTTPS endpoint. HTTP requests return a 403 status code, and the site is reachable over HTTP/3. The domain was registered through PDR Ltd. and is listed on a single security blocklist. It has been blocked by the PhishDestroy service, and one of ninety‑one VirusTotal scanners flagged it as malicious, while Gridinsoft assigns a trust score of 0 / 100. The page title returned by the server is “Un momento…”, but no further page content has been publicly disclosed. Defenders should treat this domain as high‑risk: it should be added to deny lists, DNS filtering should be applied, and any outbound connections to the associated IP be monitored for suspicious activity. Continuous observation is advised to detect any changes in hosting, certificate renewal, or additional detections that could indicate escalation of the campaign.