trustcard[.]cc

Analysis of the domain trustcard.cc indicates it was a high-risk phishing infrastructure targeting Mastercard users, specifically designed to impersonate a crypto card service. The domain was registered on February 21, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com and resolved to the IP address 104.21.66.19, hosted on Cloudflare's network (AS13335) in the United States. Nameservers kristin.ns.cloudflare.com and otto.ns.cloudflare.com were associated with the domain, which lacked an SSL certificate, increasing the risk of unencrypted data interception. The page title, 'Trust | Your Private Crypto Card,' aligns with the reported scam type of wallet or seed phishing, suggesting an attempt to deceive users into divulging cryptocurrency wallet credentials or recovery phrases.

Detection by multiple security vendors and blocklists further supports its classification as malicious. As of July 23, 2026, the domain is offline, but it was previously flagged by four security blocklists (PhishDestroy, MetaMask, ScamSniffer, and SEAL) and appeared in one AlienVault OTX threat intelligence pulse. VirusTotal data shows 15 out of 93 security vendors marked the domain as malicious, though this does not represent a comprehensive verdict. Defenders should treat this domain as confirmed malicious infrastructure.

While it is currently inactive, historical resolution to Cloudflare IPs and the absence of SSL certificates are consistent with phishing campaigns. Organizations should ensure blocklist updates include this domain and monitor for any reactivation or related infrastructure. The registration details and hosting provider do not provide additional attribution, but the timing and targeting of Mastercard users in a crypto-related scam are notable. No further content analysis is available, so the exact mechanics of the phishing kit remain unconfirmed.