trust-cards[.]digital

The domain trust-cards.digital was registered on 21 February 2026 and resolves to the Cloudflare address 104.21.13.203 (AS13335, United States). The authoritative name servers are pete.ns.cloudflare.com and samara.ns.cloudflare.com, indicating that the infrastructure is fully hosted behind Cloudflare’s reverse‑proxy service. No TLS certificate was observed, so the site operated without HTTPS.

The publicly visible page title reads "Trust | Your Private Crypto Card", and the listed brand target is Trust Wallet, classifying the activity as a crypto‑related impersonation campaign. VirusTotal analysis shows that 13 of 95 scanning engines flagged the domain as malicious, and the domain appears on a single external blocklist that is currently enforced by the PhishDestroy service. The site is presently taken offline, which limits further content inspection, but the combination of brand impersonation, a crypto‑card theme, and the detection history strongly suggests a credential‑stealing or fund‑diversion scheme aimed at Trust Wallet users.

Defenders should ensure that trust-cards.digital is blocked at the DNS and proxy layers, update intrusion‑prevention signatures to include the observed IP and name‑server pair, and monitor for newly registered domains that resolve to the same Cloudflare AS for similar brand‑targeted scams. Because the site lacks an SSL certificate, any client that attempted a connection would have been exposed to clear‑text traffic, increasing the risk of credential capture. Continuous threat‑intel feeds should be consulted for any re‑appearance of the domain or related indicators, and organizations using Trust Wallet should warn users to verify URLs carefully and to avoid providing private keys or recovery phrases to unsolicited sites.