tw-wallets[.]net

PhishDestroy first observed tw-wallets.net on Aug 20, 2026. The captured page title is “Trust Card — Spend Crypto Like Cash, Everywhere”. Current evidence score: 88/100 (critical).

One source contains a positive finding: SEAL. SEAL listed the hostname in the separate external-blocklist snapshot on Aug 20, 2026 at 06:20 UTC. Non-positive and contextual checks: VirusTotal recorded 0 detections among 91 engines on Aug 20, 2026 at 02:32 UTC. AlienVault OTX listed 4 community pulse references (not vendor detections) on Aug 20, 2026 at 08:42 UTC. URLQuery recorded no positive detection; no observation timestamp was retained. Google Safe Browsing returned no flag on Aug 20, 2026 at 08:41 UTC. URLScan completed without a malicious verdict (score 0) on Aug 20, 2026 at 05:08 UTC. The 0/91 VirusTotal snapshot and the positive findings above are conflicting observations from different sources or collection times.

The collector marked the hostname reachable on Aug 20, 2026 at 02:00 UTC, but did not retain the HTTP response code. Registration records for the domain list Hosting Concepts B.V. d/b/a Registrar.eu as the registrar and Aug 19, 2026 as the creation date. Registration preceded first observation by 1 day. At collection time, the hostname resolved to 82.47.62.43 on AS202051 (NETGRID HOST LTD). The recorded endpoint location is Thessaloniki, GR. The stored server header is nginx/1.18.0 (Ubuntu). The evidence archive retains 2 visual captures from PhishDestroy and URLScan. TLS metadata lists Let's Encrypt / YR2 as the certificate issuer with validity through Nov 17, 2026; checked Aug 20, 2026 at 04:02 UTC.

Stored content provides classification context, but only one source contains a positive finding. The stored fields do not identify an impersonated brand or victim interaction.