trusted-settings[.]org

trusted-settings.org was registered by Fewmoretaps OU d/b/a Trustname.com and created on July 28, 2026. The domain is served through Cloudflare, using the nameservers clayton.ns.cloudflare.com and sandy.ns.cloudflare.com, and resolves to the IP address 188.114.97.3. As of the report date (July 31, 2026) the domain remains active and is classified as a generic phishing campaign targeting credential collection.

VirusTotal has recorded scans from 91 antivirus and URL‑reputation vendors; none of the scanners flagged the domain, although the absence of detections does not imply benign intent. The domain is presently listed on a single security blocklist and has been blocked by the PhishDestroy sinkhole, indicating that at least one external mitigation service has taken action against it. No public evidence of a valid SSL certificate, HTTP status code, Safe Browsing rating, or OTX tag has been published, and the page title of the landing site has not been disclosed.

Defenders should continue to monitor DNS queries for the 188.114.97.3 address and the associated Cloudflare nameservers, enforce URL filtering based on the known blocklist entry, and consider adding the domain to internal deny lists. Network traffic to the domain should be inspected for credential‑stealing attempts, and any user‑reported encounters should be escalated for forensic capture. Because the domain is newly created, threat actors may still be refining their lure; ongoing collection of payload samples and page content is recommended to refine detection rules.