trustcard[.]tw

PhishDestroy identifies trustcard.tw as a newly registered domain actively engaged in a generic phishing campaign, currently under investigation for impersonating legitimate financial services. The domain leverages social engineering tactics to deceive users into divulging sensitive payment card information or installing malicious drainer kits. The threat actor behind trustcard.tw appears to be testing infrastructure viability, as no known drainer kit signatures have been publicly documented at this stage. Given the domain’s fresh registration and low detection rates, users should exercise extreme caution and verify any unsolicited financial communications independently.

This domain resolves to IP address 216.150.1.193 and is registered through Epag.de, utilizing a Let's Encrypt SSL certificate to enhance legitimacy. VirusTotal reports 0 detections out of 95 scanning engines, indicating minimal detection coverage despite active phishing operations. The domain was created on May 14, 2026, and has not yet been flagged by Google Safe Browsing (GSB) or major blocklists, suggesting a recent deployment phase. Technical indicators such as the IP geolocation and registrar choice do not immediately correlate with known malicious infrastructure, complicating early-stage attribution.

As of this report, trustcard.tw remains active with an 'under_investigation' status, representing a moderate but evolving risk. PhishDestroy has flagged the domain for heightened monitoring, and users are advised to block access via network or browser-level controls. While the immediate risk is constrained by low detection evasion, the potential for rapid escalation into a widespread campaign remains plausible. Users should avoid interacting with this domain, report suspicious communications, and rely on official financial channels for payment verification. Organizations are encouraged to update threat intelligence feeds and deploy DNS filtering to preemptively block access. The residual risk hinges on the threat actor’s ability to refine evasion techniques and scale operations.