trust-web3[.]pro

The domain trust-web3.pro was registered on February 26, 2026 and is currently offline. DNS resolution points to the IP address 5.181.161.102, which resolves to a hosting provider identified as Tilda Publishing Ltd in Ukraine. The domain is served through Cloudflare nameservers (jaime.ns.cloudflare.com and sue.ns.cloudflare.com) and the web stack includes Tilda and Hammer.js, a combination often seen in quickly assembled landing pages. No TLS certificate was observed, indicating that the site operated without HTTPS protection. The page title returned by the server was "Blank page," and no further content was captured for analysis.

The domain appears on a single security blocklist and is listed as blocked by the PhishDestroy service. VirusTotal analysis shows that four of ninety‑five security vendors flagged the domain, confirming that external scanners have identified it as malicious. Registration details list Web Commerce Communications Limited dba WebNic.cc as the registrar, a provider frequently associated with bulk‑registered domains used for fraudulent campaigns. The threat is categorized as an investment scam, suggesting that any contact vectors would have likely advertised false investment opportunities.

For defenders, the immediate recommendation is to add trust-web3.pro to perimeter blocklists and ensure that intrusion detection signatures reference the associated IP address 5.181.161.102 and Cloudflare name server patterns. Network monitoring should watch for outbound connections to this IP range, and email filters should be updated to flag any messages containing the domain. Because the site is currently offline, threat actors may redeploy the infrastructure under a new domain; continuous observation of newly registered domains using the same registrar or similar technology stacks (Tilda, Hammer.js) is advised. Incident response teams should retain this indicator set for forensic correlation with any future phishing or investment‑fraud campaigns.