user3128[.]cardstrust[.]com
“Trust | Your Private Crypto Card”
साक्ष्य सारांश
On 23 July 2026 the investigative team reviewed the domain user3128.cardstrust.com, which was observed to host a wallet/seed phishing page titled “Trust | Your Private Crypto Card”. The site impersonates the Mastercard brand and was registered on 13 January 2026 through Global Domain Group LLC. The domain resolves to IP 188.114.96.3, an address owned by Cloudflare, Inc. (AS13335) located in the United States. No TLS certificate was presented, indicating the site served over plain HTTP. Cloudflare’s authoritative name servers mckenzie.ns.cloudflare.com and micah.ns.cloudflare.com are configured for the domain. Reputation services flag the domain as highly malicious.
Gridinsoft assigned a trust score of 0 out of 100. VirusTotal reported 15 positive detections out of 93 scanned engines. The domain appears on two public blocklists and has been actively blocked by PhishDestroy and ScamSniffer. These indicators collectively confirm that the infrastructure is being used for brand‑impersonation phishing aimed at extracting cryptocurrency wallet seeds.
The site is currently offline, which limits real‑time analysis of HTTP responses or content. Nonetheless, the available evidence demonstrates a deliberate attempt to lure victims by referencing Mastercard and promising a “private crypto card”. Defenders should continue to block the domain at network perimeter, update URL filtering lists, and monitor for any re‑hosting attempts from the same IP or Cloudflare ASN. Incident response teams should also advise users to disregard unsolicited communications claiming to offer Mastercard‑related crypto services and to verify any such claims through official Mastercard channels.
भेजे गए प्रमाण का स्नैपशॉट
- भेजा गया
- लेज़र रिकॉर्ड
- 1
- केस आईडी
PD-20260207-D24346- PDF दस्तावेज़
- PDF प्रमाण
प्रमाण का पूरा पाठ
Acceptable Use Policy (AUP): The domain user3128.cardstrust.com is engaged in phishing activities, which directly contravenes the AUP prohibiting illegal activities, fraud, and deception.
Terms of Service (TOS): The registrar reserves the right to suspend or terminate services for violations, and the ongoing phishing operations constitute a clear breach of these terms.
Applicable Laws (Unknown):
Computer Fraud and Abuse Act (CFAA): This U.S. law prohibits unauthorized access to computers and networks, which is relevant given the phishing nature of the domain.
Wire Fraud Statute (18 U.S.C. § 1343): This law criminalizes schemes to defraud individuals or entities via electronic communications, applicable to the fraudulent activities associated with this domain.
CAN-SPAM Act (15 U.S.C. § 7701): This act regulates commercial email and prohibits misleading headers and deceptive subject lines, which are often utilized in phishing schemes.
Regulatory Note: Failure to take immediate action against this domain may result in liability for facilitating illegal activities, and could expose your organization to regulatory scrutiny and potential penalties.
Data Coverage
धमकी प्रतिक्रिया पाइपलाइन
ब्लॉकलिस्ट कवरेज
10 निगरानी वाले बाहरी स्रोत · संग्रहीत स्नैपशॉट 11/08/2026
पहचान समयरेखा
-
Cloudflare Radar
Cloudflare Radar स्कैन संग्रहीत · स्कैन खोलें
सहेजा गया कैप्चर
डोमेन इंटेलिजेंस
तकनीकी विवरणDNS, TLS नाम और समय-मुद्राएँ
ICANN OVERSIGHT
Registration: cardstrust.com
प्रत्यायन और आरएए संदर्भ
प्रत्यायन और आरएए संदर्भ
Registrar accreditation and DNS abuse obligations
For the registrable domain cardstrust.com behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
वायरसटोटल विश्लेषण
क्या आप इस साइट से प्रभावित हुए?
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
किसी भी डोमेन की जाँच करें
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंफ़िशिंग की रिपोर्ट करें
संदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंसीधा खतरा फीड
हाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंजानकारी में रहें, सुरक्षित रहें
लाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।