app[.]card-trustwallet[.]online

This domain presents an elevated risk as it engages in brand impersonation, specifically targeting Trust Wallet users. The site, titled 'Trust Wallet Card,' is a sophisticated attempt to deceive individuals into believing they are accessing a legitimate cryptocurrency card service. PhishDestroy has flagged this domain as an active threat, urging caution.

The domain was created on March 21, 2026, and is registered through Global Domain Group LLC. It resolves to IP address 172.67.138.27 and uses an SSL certificate from Let's Encrypt (E7), which can lend a false sense of security. Despite appearing on only one security blocklist, VirusTotal shows that a mere 1 out of 95 security vendors currently flag this domain as malicious, indicating a low detection rate that underscores its dangerous nature. This combination of factors—a very recent creation, a common hosting IP, and minimal security visibility—makes it a prime candidate for a crypto drainer attack.

To protect yourself, never enter your Trust Wallet credentials or seed phrase on this site. Always verify the official Trust Wallet website URL before interacting. Use PhishDestroy's browser extension to automatically block such threats. If you have already provided any information, immediately transfer your funds to a new wallet and enable two-factor authentication where possible. Report the domain to relevant authorities and consider monitoring your accounts for unauthorized activity.