trustcardpay[.]xyz

PhishDestroy identifies trustcardpay.xyz as an active credit card phishing domain under current investigation. This fraudulent website mimics legitimate card service portals to harvest payment credentials and sensitive financial data from unsuspecting users.

This domain was flagged by PhishDestroy with a risk level of under_investigation due to its active status and the presence of a generic phishing lure. VirusTotal currently shows 3/95 detections, indicating it remains undetected by most antivirus engines. The domain was registered on April 19, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, and resolves to the IP address 172.67.189.105. Its SSL certificate is issued by Let's Encrypt, which, while legitimate, does not validate the domain's trustworthiness. As of this report, trustcardpay.xyz has not been listed on any major blocklists, and its domain trust score remains unverified due to its recent creation.

Users are strongly advised to avoid interacting with trustcardpay.xyz or entering any payment, login, or personal information. If you have already provided credentials or payment details, immediately contact your bank or card issuer to report potential fraud and request a card replacement. Use browser security features like Safe Browsing or third-party tools to flag and block malicious domains. Organizations should consider updating firewall rules and DNS filters to block traffic to 172.67.189.105 and flag the domain trustcardpay.xyz. Always verify website authenticity by checking for HTTPS, domain spelling, and official branding before submitting sensitive data.