cardtrust[.]one

PhishDestroy identifies cardtrust.one as a recently activated domain designed to mimic a legitimate trust or verification page. The site’s page title “Trust” and generic wording are meant to trick visitors into believing they’re on a secure portal, potentially harvesting login credentials or payment details entered by unsuspecting users. The page is currently classified under a generic phishing threat while further analysis is conducted, indicating active deception tactics aimed at credential theft or financial fraud.

This domain was flagged by PhishDestroy on receipt of multiple user reports and automated detection. Technical indicators confirm it was registered on March 05, 2026, through Dynadot Inc, resolving to IP 37.120.161.160 with a valid Let’s Encrypt SSL certificate. As of this assessment, VirusTotal scanning shows 0 detections out of 95 engines, meaning it currently evades mainstream antivirus detection—highlighting the importance of proactive user vigilance and real-time threat intelligence.

If you visited cardtrust.one or entered any personal or financial information, immediately change passwords for any accounts you may have used on the site. Monitor your bank and credit card statements for unauthorized transactions. Report the incident to your financial institution and consider using identity theft protection services. Avoid re-visiting the domain, and clear your browser cache if you suspect tracking. Share this alert with others to prevent further exposure—this site poses an active credential theft risk despite low antivirus detection rates at this time.