trustchain[.]cards

Analysis of trustchain.cards indicates the domain is currently active and was registered on July 02, 2026 through Dynadot Inc. The authoritative nameservers listed are ns1.dyna-ns.net and ns2.dyna-ns.net, and DNS resolution points to the IPv4 address 91.92.35.233. The domain has been observed on three external security blocklists and is explicitly blocked by PhishDestroy, MetaMask, and SEAL, suggesting that multiple threat‑intel feeds have identified malicious use. VirusTotal records show the domain was scanned by 91 vendors, none of which raised a detection at the time of the scan; this absence of flags does not constitute validation of safety and may reflect evasion or limited analysis.

No public information about SSL/TLS configuration, HTTP status codes, or page title is available, and the content of the site has not been captured in the current intelligence set, leaving the exact phishing lure undefined. The limited data points, however, align with typical infrastructure patterns employed by generic phishing campaigns: a newly created domain, rapid deployment on shared hosting, and immediate inclusion on blocklists. Defenders should enforce network‑level deny rules for the IP address 91.92.35.233, add trustchain.cards to URL filtering and email security policies, and monitor for any future changes in the domain’s DNS records or hosting provider.

Continuous re‑scanning with multi‑vendor services is recommended to capture any subsequent malicious payloads that may be added. Organizations that rely on brand‑specific authentication flows should treat any communication referencing “trustchain” as potentially fraudulent until verified through official channels.