twcards[.]click

The domain twcards.click was registered on April 28 2026 via Gname.com Pte. Ltd. It is currently active and resolves to IP 91.92.243.12. The authoritative name servers are a.dnspod.com, b.dnspod.com, and c.dnspod.com. An HTTP request returns status code 200 and the page title retrieved is "Loading". The intelligence classification assigns the domain to a generic_phishing threat and the risk level is noted as under_investigation. No additional content analysis is available, and the page's functionality has not been publicly disclosed. The infrastructure indicates a recent registration and use of a DNS provider that hosts many short-lived domains, which is consistent with fast-flux or abuse patterns observed in phishing campaigns. Because the domain is actively resolving and serving HTTP content, defenders should block network connections to 91.92.243.12 and add twcards.click to URL filtering and sinkhole lists. Monitoring of DNS queries for the associated dnspod.com name servers may provide early warning of related domains. Further investigation, such as content retrieval and sandbox execution, is recommended to determine the specific payload or credential-harvesting mechanisms employed.