# app.card-trustwallet.online — SUSPICIOUS

> PhishDestroy flags app.card-trustwallet.online as a crypto drainer that impersonates Trust Wallet. VirusTotal shows only 1 of 95 scanners detect it.

## Summary
PhishDestroy identifies app.card-trustwallet.online as an elevated-risk domain impersonating Trust Wallet to deploy crypto drainers, a specialized form of credential-stealing malware targeting cryptocurrency wallets. This site is not associated with the official Trust Wallet brand and should be treated as a high-confidence threat to user funds and private keys.  This domain was flagged by PhishDestroy due to confirmed brand impersonation, with VirusTotal showing only 1 of 95 security vendors currently detecting it. The site resolves to IP address 172.67.138.27, is registered through Global Domain Group LLC, and holds a Let's Encrypt SSL certificate. Domain creation occurred on March 21, 2026, making it a very recent registration with minimal historical trust indicators.  Crypto drainers hosted on impersonated domains typically inject malicious JavaScript that monitors clipboard activity for cryptocurrency addresses and replaces them with attacker-controlled addresses. The site's newness (created March 21, 2026), low detection rate (1/95 on VirusTotal), and use of a free SSL certificate suggest a hastily deployed operation likely targeting users through phishing emails or fraudulent advertisements. The registrar Global Domain Group LLC has been associated with numerous malicious domain registrations in the past year.  To mitigate risk, users should never click links from unsolicited messages claiming to be from Trust Wallet. Always verify official domains (trustwallet.com) through multiple sources before entering credentials or transferring funds. Consider using hardware wallet solutions and enable transaction notification features to detect unauthorized transfers. If you've already interacted with this domain, immediately transfer remaining funds to a new wallet, revoke any connected permissions, and scan your device for malware using reputable security software. Report the domain to Trust Wallet's official support channels and block it in your browser and network defenses.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Trust Wallet

## Domain Intelligence
- Registered: 2026-03-21 18:13:03
- Registrar: Global Domain Group LLC
- IP: 172.67.138.27

## Detection Status
- VirusTotal: 1 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/b7f12dea-6cab-46f6-9360-d68c1fc30b35
- PhishDestroy: https://phishdestroy.io/domain/app.card-trustwallet.online/
- LLM endpoint: https://phishdestroy.io/domain/app.card-trustwallet.online/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/app.card-trustwallet.online/
Last updated: 2026-03-22