trustcardswallet[.]com

The domain trustcardswallet.com was registered on March 11, 2026 through NiceNIC International Group Co., Limited and resolves to the IPv4 address 178.17.59.37, which is hosted in Poland under ASN 213702 belonging to QWINS LTD. Cloudflare name servers brad.ns.cloudflare.com and penny.ns.cloudflare.com serve the zone, and no SSL/TLS certificate is presented for the site, indicating an unencrypted HTTP endpoint. The page title returned from the live host – “Trust Wallet - Crypto Card” – directly references the Trust Wallet brand, confirming a brand‑impersonation attempt that aligns with the classified crypto‑scam threat type. The domain has been observed on a single security blocklist and is actively blocked by the PhishDestroy service; one of ninety‑five VirusTotal scanners flagged the domain, providing limited but corroborating malicious‑activity evidence.

Current status is offline, suggesting the site has been taken down or is otherwise inaccessible. Analysis indicates that the infrastructure choices—Polish hosting, Cloudflare DNS, and lack of TLS—are typical of low‑cost malicious operations targeting cryptocurrency users. The absence of additional public intelligence such as Safe Browsing entries, Open Threat Exchange reports, or detailed HTTP response codes limits deeper behavioural insight, and the exact content of the site beyond the title remains unverified.

Defenders should proactively block the domain at network perimeters, update URL filtering lists, and monitor the associated IP address for any re‑use in future campaigns. Threat‑intel teams are advised to track the ASN and registrar for related registrations, and consider sinkholing the IP if feasible. Continuous re‑evaluation is recommended should the site become active again or if further detections emerge from additional scanning vendors.