trustcard[.]global

This domain is flagged as a high-risk credential harvesting phishing site. Analysis indicates it is actively targeting users by impersonating financial services to steal login credentials, payment details, or personal identification information. The domain's infrastructure and detection patterns align with known phishing campaigns designed to deceive victims into entering sensitive data on fraudulent web forms. Infrastructure analysis reveals the domain trustcard.global was registered on June 17, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com. It resolves to IP address 104.21.43.100, hosted on AS13335 (Cloudflare, Inc.) in the United States. The SSL certificate is issued by Google Trust Services (WE1), a common tactic to lend false legitimacy. VirusTotal reports 5 out of 95 security vendors flagging the domain as malicious. The domain appears on three security blocklists and is actively blocked by multiple threat intelligence feeds, including PhishDestroy, MetaMask, and SEAL. Mitigation requires immediate action from network defenders and end users. Organizations should block the domain and its resolving IP (104.21.43.100) at the firewall or DNS level. Security teams should monitor for connections to this domain in logs and investigate any internal systems that have interacted with it. End users should avoid clicking links to trustcard.global, verify the legitimacy of financial service communications through official channels, and enable multi-factor authentication on all financial accounts. If credentials were entered on this site, affected users must reset passwords immediately and monitor accounts for unauthorized activity.