trustgreenbk[.]com

trustgreenbk.com was registered on 21 February 2026 through NameSilo, LLC. DNS resolution points to the IPv4 address 188.138.39.187, which belongs to AS29066 (velia.net Internetdienste GmbH) located in France. The domain is served by the authoritative nameservers dns1.afeeshost.ltd, dns2.afeeshost.ltd and dns3.afeeshost.com. No TLS certificate is presented, indicating that the site was delivered over plain HTTP only. The page title returned from the host is “Trust Green Bank‑ Your New Favorite Bank”, matching the generic phishing classification supplied in the intelligence. VirusTotal scans recorded seven positive detections out of ninety‑three submitted scanners, and the domain appears on a single public blocklist.

PhishDestroy has also flagged the domain. As of the reporting date, the site is reported offline, suggesting that takedown actions have been applied. The observable evidence confirms that the infrastructure is intentionally minimal: a recently created domain, a single hosting IP in a European ASN, and public‑facing nameservers that are not tied to a well‑known hosting provider. The lack of an SSL certificate further reduces the credibility of the site and aligns with typical phishing deployments that rely on HTTP to avoid certificate costs. While the page content has not been captured, the title alone indicates an attempt to impersonate a financial institution.

Uncertainty remains regarding the full scope of the campaign, the presence of additional phishing URLs, or any credential‑harvesting backend. Defenders should continue to block 188.138.39.187 and the associated ASN, add trustgreenbk.com to local URL filtering and sinkhole lists, and monitor NameSilo registrations for similarly patterned domains. Regular re‑query of VirusTotal and blocklist feeds is recommended to capture any resurgence. Network‑level alerts for HTTP requests to the listed nameservers can provide early indication of re‑activation.