tw-cards[.]cc

This domain tw-cards.cc is classified as generic phishing with a high risk level and remains active as of the report date. It was created on May 07, 2026 and resolves to the IP address 196.251.107.223. The domain uses an SSL certificate issued by Let's Encrypt and is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. The observed page title is Securing access. Infrastructure analysis reveals consistent resolution to the listed IP without additional hosting details available in the current data set.

Detection metrics indicate the domain appears on 4 security blocklists and is flagged by 17 out of 95 vendors on VirusTotal. It is also referenced in 15 threat intelligence pulses within AlienVault OTX. A trust score of 0/100 has been recorded from available scoring sources. These indicators collectively support the high risk assessment while the exact deployment timeline after registration remains uncertain based on provided records.

Defenders should block the domain and its resolving IP across network perimeters and endpoint controls. Monitoring for similar domains using the same registrar or certificate authority is advised given the observed patterns. Regular review of blocklist updates and pulse contributions can help track any changes in status or infrastructure. The combination of recent creation, multiple independent flags, and active status warrants priority handling in security operations.

Uncertainties include the precise targeting scope and any associated infrastructure beyond the single IP resolution. Continued observation is necessary to determine whether additional subdomains or related assets emerge. Actionable steps focus on immediate containment using the concrete indicators such as the IP address, creation date, and detection counts rather than assumptions about operational intent.