trucards[.]app
“Trust Card”
trucards.app has been flagged for active crypto drainer operations under investigation. This domain exhibits multiple indicators associated with cryptocurrency-focused credential harvesting and fund redirection attempts. Initial analysis reveals a newly registered domain (April 19, 2026) resolving to IP 216.150.1.1, with no current blocklist presence and a clean SSL certificate issued by Let's Encrypt. The registrar, TLD Registrar Solutions Ltd, shows no prior reputation for abuse, while VirusTotal scans currently return 0 detections across 95 engines, indicating limited but not exhaustive exposure. This combination suggests either a highly targeted campaign or a recently activated infrastructure before widespread detection mechanisms caught up.
This domain was registered through TLD Registrar Solutions Ltd and resolved to IP address 216.150.1.1 on day one of its existence (April 19, 2026). The domain operates with a valid Let's Encrypt SSL certificate, which increases user trust but does not confirm legitimacy. As of current analysis, VirusTotal shows 5 out of 95 detection engines flagging this site, placing it in a pre-widespread-alert status. Trust scores from reputable services remain unassessed due to age and obscurity. Despite low immediate detection, the combination of fresh registration, single-IP hosting, and generic top-level domain usage creates a high-risk profile for users engaging in cryptocurrency transactions or wallet connections.
Cryptocurrency drainer domains like trucards.app typically employ deceptive tactics, including imitation of legitimate crypto platforms or wallet service interfaces, to trick users into connecting their digital wallets. Once a connection is established, smart contract interactions or malicious JavaScript execution drains funds directly. Users should immediately block this domain both on network and browser levels. Organizations are advised to implement DNS filtering rules targeting this domain and IP, and to audit any recent wallet connection logs for suspicious authorization events. Additionally, security teams should broadcast this indicator to preventative monitoring systems while awaiting VirusTotal community validation or additional threat intelligence updates.
Record della segnalazione inviata
Istantanea delle prove inviate
- Inviato
- Voci del registro
- 1
- ID del caso
PD-20260429-47E938- Artefatto PDF
- Prova in PDF
Testo completo delle prove
Illegal Activities: Active phishing operation targeting victims
Fraud & Deception: Impersonation of legitimate services
Identity Theft: Collection of credentials under false pretenses
Applicable Laws (Unknown):
International Anti-Cybercrime Regulations
Budapest Convention on Cybercrime
Universal Fraud Prevention Laws
Phishing activities violate international cybercrime conventions and Unknown's domestic fraud laws.
Action Required: This evidence-backed report demonstrates clear violations requiring suspension per your policies. Continued hosting exposes your organization to regulatory scrutiny and potential legal liability.
Pipeline di risposta alle minacce
Copertura delle blocklist
10 fonti · sincronizzato il 10/08/2026
Acquisizione salvata
Analisi dei domini
Dettagli tecniciDNS, nomi TLS e date
ICANN OVERSIGHT
Accreditamento e contesto RAA
Accreditamento e contesto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Tecnologie
4 tecnologie identificate con alta affidabilità
Analisi di VirusTotal
Analisi delle prestazioni del sito
Google PageSpeed Insights — mobile performance audit of trucards.app · checked Apr 29, 2026
Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo