tws-finane[.]com

Analysis of the domain tws-finane.com, created on June 07, 2026, indicates that it is currently active and poses a high-risk level as a generic phishing threat. The domain has been flagged by multiple security measures, including being blocked by PhishDestroy, MetaMask, and SEAL, which highlights its malicious intent. It resolves to the IP address 172.67.219.103, which is often associated with domains of dubious nature.

The domain is registered through Ultahost, Inc., and utilizes Cloudflare's nameservers (joyce.ns.cloudflare.com and theo.ns.cloudflare.com), indicating possible use of Cloudflare services for hosting or protection, which is common in such threats to obscure their origin. Furthermore, this domain appears on three security blocklists, affirming its classification as a threat. VirusTotal analysis reveals that 6 out of 95 security vendors have flagged this domain, suggesting a notable recognition of its malicious characteristics by several security platforms.

Given these factors, it is strongly advised that users refrain from interacting with this domain, and organizations should consider implementing blocklists that include this domain and its associated IP address to mitigate potential risks. Continuous monitoring and updating of security parameters are recommended to protect against phishing attempts related to this domain.