Domain trust is the assumption that a page or file is safe because it appears on a legitimate or familiar website. A genuine hostname can confirm where content is hosted, but it does not prove who created that content or whether the site owner endorses it.
Attackers can exploit this assumption by directing people to user-published pages, shared documents, or downloads on trusted services and persuading them to run commands or install files. Defenders and users should verify the source and purpose of specific content, not rely on a familiar brand or hostname alone. Treat unexpected instructions to execute code as suspicious, even when they appear on a legitimate domain.