trustwalletcard[.]site

This domain, trustwalletcard.site, poses as an official Trust Wallet service to deceive users into entering sensitive account credentials, recovery phrases, or payment details. The fraudulent site mimics the branding, layout, and language of the legitimate Trust Wallet platform, targeting cryptocurrency users who may believe they are accessing a secure wallet or card service. Such impersonation attacks are commonly used to steal funds, gain unauthorized access to digital assets, or install malicious software on victims' devices. Analysis indicates the domain was registered on March 5, 2026, through NETIM SAS, a registrar often used in phishing infrastructure due to its accessibility and privacy features. At the time of assessment, the domain was flagged by 2 out of 95 security vendors on VirusTotal, suggesting limited but confirmed detection. It resolved to the IP address 46.202.142.2 and was listed on one security blocklist. The page title, 'Trust Wallet.', further confirms the intent to impersonate the legitimate service. Technologies detected include Bootstrap for frontend design, LiteSpeed as the web server, and Hostinger as the hosting provider, with HTTP/3 support—common in modern phishing sites to appear more credible. Users who visited trustwalletcard.site should assume their credentials or recovery phrases may have been compromised. Immediately disconnect any connected wallets from the internet and transfer all assets to a new, secure wallet. Enable multi-factor authentication on all financial and cryptocurrency accounts. Scan the device used to access the site for malware using updated security software. Monitor all linked accounts for unauthorized transactions and report any suspicious activity to the legitimate service provider. Avoid interacting with any communications claiming to be from Trust Wallet that reference this domain, as they may be follow-up phishing attempts.