trustproduction[.]club

The domain trustproduction.club was registered on February 21, 2026 through Global Domain Group LLC and began resolving to the Cloudflare address 172.67.145.251. Infrastructure analysis shows the domain uses the Cloudflare nameservers marlowe.ns.cloudflare.com and miles.ns.cloudflare.com, indicating that the attacker leveraged Cloudflare’s CDN and DNS services to hide the true origin of the site. No TLS certificate was observed, meaning the site was reachable only over HTTP, which is consistent with the reported offline status at the time of analysis. The page title returned from the host, "Trust - Cryptocurrency Card from Trust Wallet," suggests an attempt to associate the site with a legitimate cryptocurrency wallet service, while the documented impersonation target is the brand Argent.

This aligns with the listed scam type of a crypto scam. Detection data reveal that 20 of 95 security vendors on VirusTotal flagged the domain, and it appears on three independent security blocklists. Additional defensive feeds from PhishDestroy, MetaMask, and SEAL have already listed the domain as malicious, providing multiple layers of early warning. The IP resides in the United States under ASN 13335, owned by Cloudflare, Inc., a common hosting choice for short‑lived phishing infrastructure.

Given the combination of brand impersonation, lack of encryption, and multiple vendor detections, the risk assessment is high. Defenders should ensure the domain is blocked at the network perimeter, update URL filtering and DNS sinkhole rules, and monitor the associated Cloudflare IP for any re‑activation. Users of Argent should be warned not to trust unsolicited links referencing trustproduction.club, and any credential or wallet information entered on that site should be considered compromised. Continuous vigilance is advised, as threat actors may repoint the domain to new infrastructure if the current host is taken down.