t-newcard[.]click

PhishDestroy identifies t-newcard.click as an active credential theft domain posing under investigation for generic phishing tactics. This site masquerades as a legitimate service to harvest user credentials, leveraging social engineering to trick visitors into submitting sensitive login details. The domain does not appear to deploy advanced drainer kits but instead relies on impersonation and urgency to prompt immediate action, a common tactic in credential theft campaigns targeting unsuspecting users.

Technical indicators confirm the domain's malicious intent. VirusTotal currently reports 9/95 detections as of seed 8a3294, indicating a low immediate detection rate despite active malicious behavior. The domain resolves to IP 185.100.157.82 and is registered through Global Domain Group LLC, a registrar known for hosting high-risk domains. Registered on April 24, 2026, this domain is extremely new, which often correlates with malicious activity as threat actors exploit recently registered domains for short-lived campaigns. The presence of a Let's Encrypt SSL certificate adds a veneer of legitimacy, potentially lowering user suspicion. While Google Safe Browsing (GSB) status and blocklist counts are not provided, the combination of new registration, low VT detections, and the specific threat type suggests a high-risk profile.

The domain's status remains active, and no takedown actions have been recorded at this time. Users should treat this domain as hostile and avoid any interaction, including visiting the site or providing any credentials. Immediate actions include blocking the domain at the network level, reporting the domain to security vendors like VirusTotal and Google Safe Browsing, and warning users within your organization or network. Despite the low current detection rate, the risk posed by this domain is significant due to its credential theft purpose and lack of established safeguards. Remaining risk is high until takedown or additional detection measures are implemented, making proactive blocking and user education critical.