mytrustcard[.]net

The domain mytrustcard.net has been identified as a crypto drainer phishing operation targeting cryptocurrency wallet users. As of the latest assessment, the domain has been taken offline, though prior activity suggests it was designed to execute unauthorized transactions by tricking users into connecting their wallets to malicious smart contracts. No specific brand impersonation has been confirmed, but the infrastructure aligns with known crypto asset theft patterns. Infrastructure analysis reveals the domain was registered on March 30, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar frequently associated with high-risk domains. The domain resolves to the IP address 188.114.97.3, which is part of a content delivery network known for providing anonymity to malicious actors. Detection metrics indicate the domain was flagged by 4 of 95 security vendors on VirusTotal, while three independent security blocklists—including MetaMask and PhishDestroy—have listed it as malicious. The Gridinsoft trust score for this domain is 0/100, further corroborating its classification as high-risk. Technologies detected on the domain include Cloudflare and HTTP/3, which are commonly leveraged to obfuscate malicious traffic and evade detection. Current status confirms the domain is offline, though the infrastructure remains a potential threat vector if reactivated. Security teams are advised to monitor for re-registration or DNS changes associated with this domain or its IP. Organizations should block the domain and IP at the network level and update endpoint protection rules to include this indicator. Cryptocurrency users should verify wallet connection prompts and avoid interacting with unsolicited links, particularly those promising token airdrops or account verification. Given the elevated risk level, continuous monitoring of related domains registered through the same registrar is recommended.