tw-digitals[.]org

PhishDestroy identifies tw-digitals.org as a confirmed crypto drainer posing as a legitimate digital services provider. This domain mimics trustworthy entities to trick users into connecting cryptocurrency wallets or entering private keys, enabling unauthorized fund transfers. The threat is elevated due to its active infrastructure and deceptive branding, which undermines user confidence in legitimate digital service platforms.

This domain was flagged by 9 out of 95 security vendors on VirusTotal, indicating widespread suspicion but not universal detection. Registered through Global Domain Group LLC on April 23, 2026, the domain resolves to IP 172.67.155.143 and utilizes a Let's Encrypt SSL certificate for added legitimacy. The combination of recent creation, low detection rates, and active hosting infrastructure suggests this is a newly deployed operation with potential for rapid expansion.

Users who visited tw-digitals.org should immediately disconnect any connected cryptocurrency wallets, revoke any granted permissions, and scan their devices for malware. If funds were transferred, report the incident to local law enforcement and file a complaint with relevant financial authorities. Avoid interacting with this domain or any associated URLs, and consider blocking the IP 172.67.155.143 at your network perimeter. Report this domain to your security team or threat intelligence platforms to prevent further exploitation.