form[.]trustbadges-adsticks[.]pro

The domain form.trustbadges-adsticks.pro was registered on December 26, 2025 through Dynadot LLC and is currently offline after being taken down by PhishDestroy. Technical reconnaissance shows the domain resolves to the IPv6 address 2606:4700:3033::ac43:ad31, which belongs to Cloudflare’s AS13335 network and is geolocated in the United States. The authoritative nameservers are ivan.ns.cloudflare.com and monroe.ns.cloudflare.com, indicating the use of Cloudflare’s DNS service. No TLS certificate is presented for the host, meaning HTTPS connections would be unencrypted or unavailable.

The public page title retrieved during the brief live window was "Furniture Next App - Somor Mk," which does not match any known brand but the intelligence flags the site as impersonating the generic brand "Across." Gridinsoft assigned a trust score of 0 out of 100, reflecting a high likelihood of malicious intent. VirusTotal scans recorded 11 detections out of 93 scanners, and the domain appears on one external security blocklist. PhishDestroy has already blocked the domain, and the site is listed as offline in current monitoring feeds.

Defenders should add the domain name, its IPv6 address, and the associated Cloudflare nameservers to their deny lists, and ensure any inbound traffic to the address is dropped. Continuous monitoring of the IP range and the registrar’s new registrations is recommended to catch potential re‑use of the same infrastructure. Organizations should also review any recent user reports for contacts that reference the "Furniture Next App" title, as those may indicate prior exposure before takedown.