MALICIOUS — CRITICAL
Pemeriksaan phishing dan keamanan tw-user.com
tw-user[.]
PhishDestroy identifies tw-user.com as an active generic phishing domain engaged in credential harvesting, likely targeting unsuspecting users through deceptive login portals.
- VirusTotal
- 4/91
- Blocklists
- 2 · MetaMask, SEAL
- Ketersediaan
- Konten tidak tersedia · HTTP 502
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
tw-user.com — Konten tidak tersedia (HTTP 502). Jenis penipuan: Credential Phishing. Ringkasan bukti: VirusTotal 4/91 (ChainPatrol, CRDF, Gridinsoft, SOCRadar); 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 78/100. Registrar: Global Domain Group.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
Evidence Analysis
PhishDestroy identifies tw-user.com as an active generic phishing domain engaged in credential harvesting, likely targeting unsuspecting users through deceptive login portals. The threat involves tricking victims into submitting sensitive credentials, which are then harvested by attackers for unauthorized access or further exploitation. Security teams should treat this domain as high-risk due to its active status and lack of detections on VirusTotal, indicating potential evasion techniques or recent deployment. The absence of detections does not imply safety, as phishing domains often fly under the radar initially. This domain was flagged by PhishDestroy on seed 442874, with technical indicators including a Let's Encrypt SSL certificate, domain creation date of May 02, 2026, resolution to IP 172.67.203.211, and registration through Global Domain Group LLC. VirusTotal currently reports 2/95 detections, suggesting minimal detection coverage despite its active phishing operations. The domain’s recent creation and lack of blocklist entries highlight its potential for rapid deployment in campaigns before being widely recognized as malicious. The use of a legitimate SSL certificate further increases its deceptive appeal, as victims may overlook red flags in the URL. To mitigate risks associated with tw-user.com, users should avoid interacting with the domain entirely. Organizations should block the domain at the network level and inspect any related traffic for signs of credential submission. Security teams should monitor for any associated IP addresses or domains registered through Global Domain Group LLC, as these may indicate broader phishing infrastructure. Additionally, users should verify the legitimacy of login portals by cross-referencing URLs with official sources and enabling multi-factor authentication to reduce the impact of credential theft. Immediate reporting of this domain to PhishDestroy or relevant threat intelligence platforms can aid in faster takedowns and broader protection for the community.
Stored source results
Recorded verdicts and infrastructure observations for this domain.
Cakupan data12 recorded checks
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Teknologi · 5 identified
HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org Keyakinan 100%Google Analytics is a free web analytics service that tracks and reports website traffic.
google.com Keyakinan 100%Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.
www.cloudflare.com Keyakinan 100%Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com Keyakinan 100%HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org Keyakinan 100%Analisis VirusTotal
Analisis Performa Situs
Google PageSpeed Insights — mobile performance audit of tw-user.com · checked May 7, 2026
Bukti & Laporan EksternalIndependent lookups and source reports
PD-20260507-58890B Recipient: abuse@globaldomaingroup.com Victim safety and official reportingImmediate actions and verified reporting channels
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.