trw-card[.]com

PhishDestroy identifies trw-card.com as an active credential theft page hosting a fake ‘Trust’ portal designed to harvest user login data. The domain does not impersonate a specific brand but instead presents itself as a generic financial trust interface, likely targeting users expecting legitimate verification pages. No crypto-drainer artifacts or brand logos were observed in the page source, indicating a straightforward credential harvesting mechanism rather than a sophisticated smart contract attack. trw-card.com was registered on April 11, 2026, through MAT BAO CORPORATION and resolves to IP 91.215.155.55. It uses a Let's Encrypt SSL certificate and remains undetected by VirusTotal (11/95 engines) as of the latest scan. It has not been flagged by Google Safe Browsing and currently shows no presence on public blocklists such as PhishTank or OpenPhish. The domain remains active and is serving content at the time of this report. Immediate blocking via DNS sinkholing or browser blocklists is recommended. Users who visited trw-card.com in the past 48 hours should reset passwords for any accounts entered on the site and enable multi-factor authentication. While the domain shows low detection, its recent creation and active status suggest ongoing deployment. Continued monitoring is advised due to the potential for rapid expansion into brand impersonation campaigns.