trust-card[.]app

This domain, www.trust-card.app, is identified as a brand impersonation threat targeting Trust Wallet, a widely used cryptocurrency wallet service. The site presents itself as a legitimate "Cryptocurrency Card" platform associated with Trust Wallet, likely designed to deceive users into entering sensitive credentials or connecting their wallets to malicious smart contracts. Such infrastructure is commonly linked to crypto drainer operations, where attackers siphon funds from victims' wallets by exploiting social engineering and technical deception. The page title "Trust - Cryptocurrency Card" further reinforces the impersonation, attempting to leverage the established reputation of Trust Wallet to gain user trust. Analysis of the domain reveals multiple technical indicators supporting its malicious classification. The domain was registered on February 21, 2026, through Name.com, Inc., and resolves to the IP address 64.29.17.1, hosted on Amazon.com, Inc. infrastructure (AS16509). Security vendors on VirusTotal flagged the domain as malicious, with 13 out of 95 engines detecting it as a threat. Additionally, the domain appears on one security blocklist and is currently blocked by PhishDestroy. The SSL certificate, issued by Let's Encrypt (R13), does not mitigate the risk, as malicious actors frequently use valid certificates to appear legitimate. The domain's current status is offline, but its infrastructure may be reactivated or repurposed for future campaigns. Users who visited www.trust-card.app or interacted with its content should take immediate action to mitigate potential risks. Disconnect any wallets linked to the site and revoke permissions for suspicious smart contracts using a trusted wallet interface. Scan devices for malware, as crypto drainers may deploy additional payloads to maintain persistence. Monitor wallet transactions for unauthorized activity and consider transferring funds to a new wallet if compromise is suspected. Report the domain to relevant security teams or blocklist providers to aid in broader threat mitigation efforts. Given the elevated risk level, vigilance is advised even if no immediate compromise is detected.