trustcardapp[.]io

This domain, www.trustcardapp.io, is flagged as a credential theft operation targeting users of the TRUST CARD financial service. Analysis indicates the site is currently offline, though prior activity involved harvesting login credentials through deceptive interfaces designed to mimic legitimate TRUST CARD authentication portals.

Infrastructure analysis reveals the domain was registered through GoDaddy.com, LLC on April 28, 2026, and resolves to the IP address 185.158.133.1. Security vendor detections include 2 of 95 VirusTotal engines flagging the domain, while it appears on a single blocklist. Additional indicators show a Gridinsoft trust score of 0/100, and technologies such as HSTS and Cloudflare were employed, likely to obfuscate malicious intent and enhance perceived legitimacy.

Given the domain’s current offline status, no active threat is present; however, residual risk remains for users who may have interacted with the site prior to takedown. Organizations are advised to block the domain and associated IP (185.158.133.1) at the perimeter, monitor for credential reuse attempts, and alert affected users to reset compromised credentials. Security teams should review logs for connections to the domain or IP to identify potential prior exposure.