twconnect[.]click

twconnect.click entered the PhishDestroy evidence set on Jun 24, 2026. The stored content classification is fake airdrop. The assembled evidence scores 63/100 (elevated).

No third-party source in the stored checks returned a positive verdict. VirusTotal recorded 0 detections among 91 engines on Jun 25, 2026 at 02:03 UTC. The external blocklist snapshot contained no matches on Aug 7, 2026 at 14:20 UTC. Google Safe Browsing returned no flag on Jun 24, 2026 at 19:30 UTC. URLScan completed without a malicious verdict (score 0) on Jun 25, 2026 at 08:12 UTC.

HTTP 502 was recorded on Aug 7, 2026 at 01:27 UTC; content was unavailable. Registration records for the domain list Global Domain Group LLC as the registrar and May 22, 2026 as the creation date. At collection time, the hostname resolved to 104.21.65.235 on AS13335 (CLOUDFLARENET - Cloudflare, Inc., US). The associated network metadata labels the endpoint as AS13335 Cloudflare, Inc. in San Francisco, US. The stored server header is cloudflare. Captured page title: “TRON AIRDROP”. DOM analysis completed on Jun 24, 2026 at 22:20 UTC; stored DOM score 63/100. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. IoC extraction completed on Jul 29, 2026 at 02:51 UTC; stored 0 format-validated wallet addresses and 0 Telegram indicators. TLS metadata lists Let's Encrypt / E8 as the certificate issuer with validity through Aug 20, 2026; checked Jun 25, 2026 at 07:00 UTC.

No target brand has been confirmed from stored page content; hostname wording alone is not treated as brand evidence.