trustcard[.]click

This domain is flagged for elevated-risk brand impersonation targeting Trust Wallet, a cryptocurrency wallet service. Analysis indicates the infrastructure is designed to deceive users into interacting with fraudulent crypto management interfaces, likely functioning as a crypto drainer to siphon digital assets from victims' wallets. The page title, 'Trust | Your Private Crypto Card,' directly mimics Trust Wallet's branding to exploit user trust and familiarity. Infrastructure analysis reveals the domain trustcard.click was registered on February 21, 2026, through Tucows Domains Inc., an unusually future-dated creation that may indicate an attempt to evade detection or establish perceived legitimacy. The domain resolves to IP address 157.22.240.103, hosted on AS215540 (GLOBAL CONNECTIVITY SOLUTIONS LLP) in Albania, a network with limited historical association with legitimate financial services. No SSL certificate was detected, increasing the risk of unencrypted credential or transaction data interception. Security vendor detections on VirusTotal report 12 out of 95 engines flagging the domain as malicious, while it appears on one active security blocklist and is specifically blocked by PhishDestroy. Mitigation steps for this threat type include immediate domain takedown requests to the registrar and hosting provider, citing the fraudulent use of Trust Wallet's intellectual property. Network defenders should update blocklists to include the domain, IP address, and associated ASN to prevent resolution within protected environments. End users should be alerted via security bulletins to verify wallet interfaces exclusively through official Trust Wallet channels, particularly avoiding domains with future-dated registration timestamps or those lacking SSL encryption. Cryptocurrency platforms are advised to monitor for unauthorized transaction attempts originating from this infrastructure and implement additional authentication layers for high-value transfers.