trust-card[.]vercel[.]app

This domain, trust-card.vercel.app, is flagged for brand impersonation targeting Trust Wallet, a cryptocurrency wallet provider. Analysis indicates the domain hosted a fake virtual card service, likely designed to harvest user credentials or sensitive financial information. The threat type aligns with credential theft and cryptocurrency fraud, where attackers exploit brand recognition to deceive victims into disclosing login details or private keys. Infrastructure analysis reveals several technical indicators of compromise. The domain was registered on February 24, 2026, through Tucows Domains Inc., and resolves to the IP address 216.198.79.67. Security vendors on VirusTotal flagged the domain, with 6 out of 95 engines detecting malicious activity. It appears on two security blocklists and is blocked by at least two threat intelligence platforms. The SSL certificate is issued by Google Trust Services, and the domain employs HSTS, a security feature that may lend an air of legitimacy to unsuspecting users. Technologies detected include Vercel, a common hosting platform for static phishing pages. As of the latest assessment, trust-card.vercel.app has been taken offline, reducing immediate exposure to potential victims. However, the domain remains a residual risk due to its recent registration and the possibility of re-emergence under a similar or altered infrastructure. Users who may have interacted with the domain are advised to monitor accounts for unauthorized activity, rotate credentials, and verify wallet addresses before conducting transactions. Organizations should update blocklists to include this domain and its associated indicators, such as the IP address and registrar details, to prevent future access attempts.