card-tw[.]org

PhishDestroy identifies card-tw.org as an active brand impersonation crypto drainer domain posing as a legitimate card service provider. This domain was flagged on April 04, 2026, only days after registration, indicating a likely campaign to exploit trust in card-related services. It resolves to IP 104.21.34.14 and uses a Let’s Encrypt SSL certificate to appear trustworthy, a common tactic among phishing operators.

This domain shows zero detections on VirusTotal out of 95 engines, highlighting a critical window of exposure where automated defenses have not yet caught up. It was registered through Global Domain Group LLC, a registrar known for high-risk domain turnovers. The combination of recent registration, zero blocklist coverage, and immediate use in phishing suggests a targeted campaign likely aimed at users expecting legitimate card services.

If you visited card-tw.org, immediately disconnect any connected wallets, revoke any approvals granted to suspicious domains, and scan your device for malware. Report the domain to your security team and file a complaint with your local cybercrime unit. Do not enter any credentials or approve transactions. Monitor your accounts closely for unauthorized activity and consider transferring remaining funds to a newly generated, secure wallet.