trustwalletcard[.]world

This domain is under investigation for brand impersonation targeting Trust Wallet, a cryptocurrency wallet service. Analysis indicates a high-risk phishing operation designed to harvest sensitive credentials, including seed phrases and private keys, through fraudulent wallet interfaces or credential submission forms. The domain exhibits characteristics of a low-detection, high-impact threat, likely leveraging social engineering to deceive users into disclosing critical authentication details. Infrastructure analysis reveals the domain was registered on May 23, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com. Despite its malicious intent, the domain currently shows 0 detections across 95 engines on VirusTotal, suggesting active evasion of automated detection systems. It appears on 3 security blocklists and has been flagged in 1 AlienVault OTX threat intelligence pulse. The Gridinsoft trust score for this domain is 0/100, further corroborating its malicious classification. Blocking actions have been implemented by MetaMask, PhishDestroy, and SEAL, though the domain is presently offline. Mitigation requires immediate action from security teams and end-users. Network-level blocking should be enforced for trustwalletcard.world and any associated IP addresses or subdomains. Cryptocurrency wallet users should verify domain authenticity before entering credentials, cross-referencing official sources for legitimate URLs. Security teams are advised to monitor for related domains registered under the same registrar or exhibiting similar naming patterns, particularly those impersonating cryptocurrency services. Incident responders should prioritize this domain in threat hunting activities, given its low detection rate and high-risk profile for credential theft.