trustwalletcard[.]cc

trustwalletcard.cc was registered on 21 February 2026 through Global Domain Group LLC and immediately pointed to a Cloudflare‑owned address (188.114.97.3) belonging to AS13335. The domain has no TLS certificate, indicating that any data entered would be transmitted in clear text. The site is flagged as a wallet/seed phishing operation that impersonates Apple, and it has been taken offline and is currently listed on one security blocklist. PhishDestroy has recorded the domain as blocked, and a Gridinsoft trust score of 0 out of 100 reflects a complete lack of trust.

VirusTotal scans show that 14 of 93 AV engines flagged the domain as malicious, reinforcing the suspicion of malicious intent. The authoritative nameservers are newt.ns.cloudflare.com and ryleigh.ns.cloudflare.com, both standard Cloudflare resolvers. The combination of a recent registration date, use of a reputable CDN for fast DNS resolution, absence of HTTPS, and low trust scores suggests a deliberate infrastructure choice to host a short‑lived phishing campaign targeting Apple users who may be prompted to enter cryptocurrency wallet seeds. Because the site is already offline, any ongoing activity is likely halted, but the registration pattern and hosting details indicate that the operators may reuse the same infrastructure for future campaigns.

Defenders should add the domain and its IP address to internal blocklists, monitor for any new domains registered by the same registrar or using the same Cloudflare nameservers, and enforce strict verification of Apple‑related communications. Users should be warned that any unsolicited request for wallet seeds or Apple credentials is likely fraudulent, and they should be instructed to report such attempts to their security teams. Continuous observation of the associated IP range (188.114.97.0/24) and periodic re‑scans of the domain URL, should it reappear, are recommended to mitigate re‑use.