tw-product[.]cc

This domain, tw-product.cc, is flagged as an active credential phishing threat as of July 12, 2026. The domain has been identified in multiple threat intelligence platforms, including AlienVault OTX, where it appears in 8 threat intelligence pulses. Infrastructure analysis reveals that the domain resolves to the IP address 202.58.104.66, which is located in China and is associated with EightJoy Networks LLC. The domain's trust score, according to Gridinsoft, is 0 out of 100, indicating a high level of risk. The domain is also listed on three security blocklists and is currently blocked by security solutions such as PhishDestroy, MetaMask, and SEAL. This suggests that the domain is known to be involved in malicious activities, particularly credential phishing, where attackers attempt to steal user credentials through deceptive means. The domain was registered through Dynadot Inc on April 22, 2026, and has been active since its creation. The exact content of the domain, beyond the page title 'Redirect with JavaScript,' has not been fully analyzed, but the high risk level and multiple blocks indicate that it should be treated with caution. Defenders are advised to monitor and block this domain to prevent potential credential theft and other related threats. Additionally, organizations should educate users about the dangers of credential phishing and implement robust multi-factor authentication mechanisms to protect against unauthorized access.