trustcards[.]lat

This domain, trustcards.lat, is actively engaged in brand impersonation targeting TrustCard, a cryptocurrency payment service. The site presents itself as a legitimate platform for spending cryptocurrency, using the page title 'TrustCard — Spend Crypto Like Cash, Everywhere' to deceive users. Analysis indicates this is not a generic phishing attempt but a targeted effort to exploit TrustCard’s branding for fraudulent purposes, likely involving crypto asset theft or credential harvesting. Infrastructure analysis reveals the domain was registered on May 11, 2026, through Dynadot LLC. It resolves to the IP address 104.21.54.182 and has been flagged by 13 of 95 security vendors on VirusTotal. The domain appears on three security blocklists and is actively blocked by MetaMask, PhishDestroy, and SEAL. Additional risk indicators include a Gridinsoft trust score of 0/100, further confirming its malicious nature. The domain remains active and poses a significant risk to users familiar with TrustCard’s services. Organizations and individuals are advised to block the domain and its resolving IP at the network level. Security teams should monitor for related infrastructure, such as subdomains or newly registered lookalike domains. Users who may have interacted with the site should verify wallet security, revoke any suspicious smart contract approvals, and report the incident to relevant fraud prevention platforms.