usdtcard[.]uk

This domain, usdtcard.uk, is identified as a crypto drainer phishing site designed to impersonate TrustCard, a purported credit card service. Analysis of the page content reveals a fraudulent interface mimicking legitimate financial platforms, likely targeting cryptocurrency wallet credentials and private keys. The site employs social engineering tactics, presenting itself as "TrustCard - The Future of Credit Cards" to deceive users into connecting their wallets, which would enable unauthorized fund transfers through malicious smart contracts or scripts. No specific drainer kit has been conclusively attributed, but the infrastructure aligns with known crypto phishing campaigns observed in 2024 and 2025. Technical indicators confirm the malicious nature of this domain. VirusTotal detection flags usdtcard.uk as malicious in 2 of 95 security vendor scans, while Gridinsoft assigns a trust score of 0 out of 100. The domain was registered on April 7, 2026, through Namecheap, Inc., a registrar frequently associated with phishing and fraudulent domains. It resolves to the IP address 68.65.123.101, which has been linked to other suspicious activities in recent threat intelligence reports. The domain appears on three security blocklists and is actively blocked by MetaMask, PhishDestroy, and SEAL, further corroborating its classification as a high-risk entity. Scamadviser assigns a trust score of 17 out of 100, reinforcing the assessment of elevated risk. As of the latest verification, usdtcard.uk has been taken offline, likely due to enforcement actions by hosting providers or domain registrars. However, the infrastructure remains a latent threat, as the domain could be reactivated or repurposed under a different name. Users who interacted with this site are advised to immediately revoke any connected wallet permissions, transfer assets to a secure wallet, and monitor for unauthorized transactions. Organizations should update their blocklists to include the domain and associated IP address, while security teams are encouraged to conduct retrospective analysis of network logs for connections to 68.65.123.101. Given the persistent nature of crypto drainer campaigns, vigilance and proactive monitoring are recommended to mitigate residual risk.