trustcard-tw[.]digital

This domain, trustcard-tw.digital, is currently active and identified as a fake login portal designed to harvest user credentials. Analysis indicates the infrastructure is configured to mimic legitimate authentication pages, likely targeting financial or payment service users. The domain remains operational and exhibits no signs of takedown or remediation at this time. Infrastructure analysis reveals the domain was registered on March 22, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com. It resolves to the IP address 172.67.217.190, which is associated with Cloudflare services, including Cloudflare Browser Insights and HTTP/3 support. Security vendors have flagged this domain, with 12 out of 95 VirusTotal engines detecting malicious activity. The domain appears on one security blocklist, and its Gridinsoft trust score is 0 out of 100, further corroborating its malicious classification. The SSL certificate is issued by Let's Encrypt, and the page title consistently displays 'Just a moment...', a common indicator of intermediary or cloaking behavior. The current status of trustcard-tw.digital is active, with no evidence of suspension or disruption. Given the elevated risk level, organizations and individuals are advised to implement immediate blocking measures at the DNS or network level. Users should avoid interacting with the domain or entering any credentials. Security teams are recommended to monitor for related indicators of compromise, including the associated IP address and registrar details, and to update detection rules to account for this infrastructure. Proactive measures, such as user awareness training and credential monitoring, are strongly advised to mitigate potential exposure.