cardstrust[.]org

The domain cardstrust.org was registered on February 09, 2026 through Global Domain Group LLC and resolved to the IP address 188.114.96.3, which belongs to Cloudflare, Inc. (AS13335) in the United States. The site employed Cloudflare’s edge services, including HTTP/3, and presented an SSL certificate identified only as “WE1.” Current probing returned a HTTP 521 response – “Web server is down” – indicating that the origin server is offline while the Cloudflare front‑end remains reachable. Reputation scoring from Gridinsoft assigned a trust score of 0 out of 100, reflecting a highly malicious assessment.

Independent security aggregators have flagged the domain: four of ninety‑three VirusTotal scanners reported malicious activity, and the domain appears on four separate blocklists. It is actively blocked by PhishDestroy, MetaMask, ScamSniffer, and SEAL, which further corroborates its classification as a phishing‑related resource. The available intelligence does not disclose the specific brand or service the site attempts to impersonate, nor does it provide samples of landing pages or payloads, leaving the exact phishing vector uncertain.

Defenders should prioritize adding cardstrust.org to deny‑list rules across perimeter firewalls, DNS filtering services, and endpoint web‑proxy controls. Continuous monitoring of the IP 188.114.96.3 for any re‑activation or shift in hosting patterns is advised, as Cloudflare can be leveraged to mask subsequent malicious infrastructure. Organizations should also inform users of the recent creation date and the low trust score to reinforce awareness, and consider sharing the indicator with threat‑sharing communities to expedite collective mitigation.