pay-trust[.]cc

This domain, pay-trust.cc, is flagged as a high-risk credential theft operation specifically impersonating TrustCard, a financial services brand. The page title, 'TrustCard - The Future of Credit Cards,' directly mimics legitimate credit card provider communications, suggesting an intent to harvest user login credentials, payment details, or personal identification information. No crypto drainer kit signatures were observed in initial analysis, but the domain exhibits classic indicators of a credential harvesting campaign targeting banking or fintech users. Infrastructure analysis reveals the following technical indicators: the domain was registered on June 25, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com. It resolves to IP address 104.21.78.231, a Cloudflare-associated endpoint commonly used to obfuscate origin servers. VirusTotal detection shows 2 out of 95 security vendors flagging the domain as malicious, a low but notable signal given the domain's recent creation. The SSL certificate is issued by Google Trust Services, providing a false sense of legitimacy. No Google Safe Browsing (GSB) blocklist entries were identified at the time of analysis, and no additional blocklist hits were recorded across major threat intelligence platforms. As of the latest assessment, pay-trust.cc remains active and unmitigated. No takedown requests or registrar suspensions have been observed. Users encountering this domain are advised to avoid interaction, particularly entering login credentials or financial information. Organizations should update web filtering rules to block the domain and its resolving IP, and monitor for related phishing emails or SMS campaigns distributing this URL. Given the domain's recent registration and low detection rate, continued vigilance is required as threat actors may pivot infrastructure or expand targeting.