trustcards[.]icu

Analysis of the domain trustcards.icu, registered on March 22, 2026, indicates elevated risk of phishing activity targeting login credentials. The domain was hosted on Cloudflare infrastructure, resolving to IP address 188.114.96.3, geolocated in Canada. Nameservers dolly.ns.cloudflare.com and ishaan.ns.cloudflare.com were configured, consistent with Cloudflare's protective proxy service. No SSL certificate was detected, increasing susceptibility to interception of transmitted data. The domain was registered through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar frequently observed in phishing campaigns due to its low-cost domain offerings.

At the time of assessment, the domain appeared on one security blocklist and was actively blocked by PhishDestroy. Gridinsoft assigned a trust score of 0/100, reflecting high suspicion. VirusTotal reported 11 detections from 94 security vendors, indicating consensus on malicious classification. The page title 'Just a moment...' typically corresponds to Cloudflare's interstitial challenge page, suggesting the domain may have been configured to filter or redirect visitors to a phishing landing page. No specific brand or service was identified in the available metadata, so the exact target of the phishing attempt remains unconfirmed.

Cloudflare Browser Insights and HTTP/3 were detected, consistent with modern web infrastructure but not indicative of threat type. Defenders should treat this domain as compromised and maintain blocklist entries. Network administrators are advised to monitor for connections to 188.114.96.3 and review logs for internal access attempts. The domain's current offline status does not preclude future reactivation; continuous monitoring is recommended.