twcard[.]co

Analysis indicates that the domain twcard.co was registered on 2026-03-04 through Dynadot Inc and is currently resolving to the IPv4 address 196.251.107.150. The address remains active as of the report date (2026-07-19) and is not associated with any disclosed autonomous system or geographic attribution in the available data. VirusTotal reports a single vendor detection among 95 scanners, suggesting that at least one security product has identified malicious behavior linked to the domain, though the specific payload or technique has not been disclosed. The classification as a generic_phishing threat implies that the site is likely being used to harvest credentials or personal information without targeting a specific brand, but no page content or target brand has been publicly analyzed. The rapid creation-to-deployment timeline (approximately four months) combined with the high risk rating underscores a purposeful campaign aimed at exploiting unsuspecting users. Defenders should add twcard.co to blocklists at DNS and proxy layers, monitor outbound connections to 196.251.107.150, and consider sinkholing the domain to disrupt the campaign. Continuous re-evaluation is advised, as additional intelligence such as hosting provider details, observed phishing emails, or payload samples may emerge.