trustwallet-card[.]com

This domain, trustwallet-card.com, poses as Trust Wallet, a legitimate cryptocurrency wallet service, to deceive users into divulging sensitive information or transferring digital assets. The site likely operates as a crypto drainer or fake login portal, designed to harvest credentials, private keys, or seed phrases, enabling attackers to gain unauthorized access to victims' cryptocurrency holdings. Given the elevated risk level, users who interact with this domain may experience immediate financial loss or long-term account compromise. Analysis indicates the domain was created on February 21, 2026, and is registered through CNOBIN INFORMATION TECHNOLOGY LIMITED. It currently resolves to the IP address 172.67.138.250, hosted on Cloudflare infrastructure (AS13335). The domain lacks an SSL certificate, a red flag for malicious activity. VirusTotal reports 17 out of 95 security vendors flagging this domain as malicious, and it appears on at least one security blocklist. The page title, 'Un instant…,' suggests an attempt to mimic a loading or verification page, a common tactic to delay user suspicion while malicious scripts execute. If you visited trustwallet-card.com or entered any information on the site, take immediate action to mitigate potential damage. First, disconnect the device used to access the site from the internet to prevent further data exfiltration. Next, revoke any active sessions or authorizations granted to third-party applications connected to your Trust Wallet account. Change passwords or recovery phrases for all cryptocurrency wallets and associated accounts, using a secure, offline device. Monitor wallet transactions for unauthorized activity and consider transferring assets to a new wallet if compromise is suspected. Report the incident to relevant security teams and law enforcement if financial loss occurs.