Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@namecheap.com.
The latest stored availability evidence still shows the domain reachable; 2 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
trust-card[.]site
“TrustCard — Ваш доступ к Web3”
trust-card.site — لم يتم التحقق منها. نوع الاحتيال: Crypto Drainer. ملخص الأدلة: VirusTotal 2/91 (ChainPatrol, Gridinsoft); 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 66/100. مسجّل النطاق: Namecheap.
يبقى تحليل PhishDestroy AI المفصل أدناه باللغة الإنجليزية للحفاظ على السجل الجنائي الرقمي الأصلي.
Domain trust-card.site is assessed as a Web3-oriented credential theft / crypto drainer infrastructure presenting itself as “TrustCard — Ваш доступ к Web3”. The page imitates wallet onboarding flows and Web3 access dashboards to trick users into connecting crypto wallets and approving malicious transaction signatures. The observed content and branding alignment suggest a deliberate impersonation of generic Web3 identity and access management services. Analysis indicates intent to harvest authentication credentials and trigger unauthorized blockchain asset transfers rather than provide legitimate service functionality.
Infrastructure analysis shows VirusTotal score 0/95 detections, indicating no current antivirus engine flags despite malicious behavior reports. The domain is registered via NAMECHEAP INC and resolves to IP 188.114.96.3. Creation date is March 30 2026. It is observed on 3 security blocklists and actively blocked by MetaMask, PhishDestroy, and SEAL. The SSL certificate is issued by Let's Encrypt, indicating automated certificate provisioning consistent with rapid deployment cycles. Detected technologies include Node.js, Express, Tailwind CSS, Cloudflare, Cloudflare Browser Insights, and HTTP/3, suggesting a modern reverse-proxy web stack commonly used for rapidly deployed fraud sites. The presence of Cloudflare fronting may obscure origin infrastructure and hinder attribution.
Current status remains active and under_investigation. Despite low automated detection (0/95), external reputation signals and wallet-blocking systems indicate high confidence malicious behavior. Users attempting interaction risk credential compromise and unauthorized transaction signing. The primary attack vector involves persuading users to connect Web3 wallets, leading to approval of token permissions or direct asset draining through malicious smart contract interactions. Recommended response actions include domain blocking at DNS/firewall level, IP 188.114.96.3 null-routing, and monitoring for related domains under similar infrastructure patterns. Security teams should also track TLS/hosting reuse indicators and identical frontend templates for clustering related campaigns. Continued surveillance is required due to potential fast redeployment under alternate domains.
مسار الاستجابة للتهديدات Pipeline
حالة قوائم الحظر العامة
لقطة محفوظة
معلومات النطاق
التفاصيل الفنيةDNS، أسماء المجال البديلة (SAN) في بروتوكول SSL، الطوابع الزمنية
ICANN OVERSIGHT
الاعتماد وسياق RAA
الاعتماد وسياق RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
التقنيات · 6 identified
Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.
nodejs.org ثقة 100٪Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.
expressjs.com ثقة 100٪Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.
www.cloudflare.com ثقة 100٪Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com ثقة 100٪HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org ثقة 100٪تحليل VirusTotal
تحليل أداء الموقع
Google PageSpeed Insights — mobile performance audit of trust-card.site · checked Jun 26, 2026
تحليل إعدادات الموقع
الأدلة والتقارير الخارجية
PD-20260531-6DA50D Recipient: abuse@namecheap.com هل تأثرت بهذا الموقع؟
إذا أدخلت بيانات اعتماد الحساب أو المعلومات الشخصية أو معلومات الدفع أو قمت بتنزيل ملف من هذا النطاق، فاتخذ إجراءً فوريًا. فيما يلي موارد لمساعدتك في الإبلاغ عن الحادث وحماية نفسك.
أبلغ السلطات المحلية
حدد بلدك للحصول على الاتصالات الرسمية المتعلقة بالجرائم الإلكترونية أو إنشاء مسودة شكوى →.
تحقق من أي نطاق
تحليل التهديدات باستخدام قائمة الحظر المخزنة، وWHOIS، وDNS، وأدلة الفحص العامة
امسح الآنالإبلاغ عن محاولة تصيد احتيالي
أرسل النطاقات المشبوهة إلى قاعدة بيانات التهديدات الخاصة بنا — ساهم في حماية المجتمع
إبلاغتحديثات فورية حول التهديدات
تقارير التصيد الاحتيالي الأخيرة وتغييرات التوفر الملحوظة
مراقبةابقَ على اطلاع، وابقَ آمنًا
راقب التهديدات في الوقت الفعلي أو اعترض على هذا الإدراج إذا كنت تعتقد أنه إنذار كاذب