trust-cards[.]digital
“Trust | Your Private Crypto Card”
Evidence Summary
The domain trust-cards.digital was registered on 21 February 2026 and resolves to the Cloudflare address 104.21.13.203 (AS13335, United States). The authoritative name servers are pete.ns.cloudflare.com and samara.ns.cloudflare.com, indicating that the infrastructure is fully hosted behind Cloudflare’s reverse‑proxy service. No TLS certificate was observed, so the site operated without HTTPS.
The publicly visible page title reads "Trust | Your Private Crypto Card", and the listed brand target is Trust Wallet, classifying the activity as a crypto‑related impersonation campaign. VirusTotal analysis shows that 13 of 95 scanning engines flagged the domain as malicious, and the domain appears on a single external blocklist that is currently enforced by the PhishDestroy service. The site is presently taken offline, which limits further content inspection, but the combination of brand impersonation, a crypto‑card theme, and the detection history strongly suggests a credential‑stealing or fund‑diversion scheme aimed at Trust Wallet users.
Defenders should ensure that trust-cards.digital is blocked at the DNS and proxy layers, update intrusion‑prevention signatures to include the observed IP and name‑server pair, and monitor for newly registered domains that resolve to the same Cloudflare AS for similar brand‑targeted scams. Because the site lacks an SSL certificate, any client that attempted a connection would have been exposed to clear‑text traffic, increasing the risk of credential capture. Continuous threat‑intel feeds should be consulted for any re‑appearance of the domain or related indicators, and organizations using Trust Wallet should warn users to verify URLs carefully and to avoid providing private keys or recovery phrases to unsolicited sites.
Data Coverage
Threat Response Pipeline
Blocklist coverage
10 monitored external feeds · stored snapshot Aug 11, 2026
10 monitored external feeds No match
Detection timeline
VirusTotal Analysis
Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive