robinhood-card[.]us

This domain, robinhood-card.us, is flagged as a high-risk crypto drainer operation impersonating the Robinhood brand. Analysis indicates the site mimics legitimate financial services, specifically targeting cryptocurrency users with promises of a TRON USDT card, 8% cashback, and a $500,000 monthly limit. The page title, "RobinHood Card — TRON USDT Card | 8% Cashback | $500K Monthly Limit | robinhood-card.us," aligns with known tactics used in wallet-draining schemes, where victims are tricked into connecting their crypto wallets to malicious smart contracts, resulting in unauthorized fund transfers. Infrastructure analysis reveals the following technical indicators: the domain resolves to IP address 186.2.175.35 and was registered on May 12, 2024, through GoDaddy.com, LLC. VirusTotal reports 16 out of 95 security vendors flagging the domain, while Google Safe Browsing categorizes it as a phishing threat. The domain remains active, with no evidence of takedown or sinkholing as of the latest verification. Additional blocklist monitoring confirms its presence on multiple threat intelligence feeds, though the exact count varies by source. Current status indicates the domain is still operational, posing an ongoing risk to users. Recommended response actions include immediate blacklisting of the domain and IP in enterprise security controls, dissemination of indicators of compromise (IOCs) to relevant stakeholders, and user education to recognize impersonation tactics. Despite existing detections, the domain’s persistence and active hosting suggest continued exploitation potential, particularly for individuals seeking cryptocurrency-related financial services. Organizations should monitor for related infrastructure, such as newly registered domains with similar naming patterns or shared hosting providers.