cn423114-wordpress-t2otc[.]tw1[.]ru

The domain cn423114-wordpress-t2otc.tw1.ru is flagged by 14 out of 93 VirusTotal vendors, indicating a significant threat. Despite being taken down, it was previously active and detected by PhishDestroy on February 26, 2026. The domain is also listed on two public blocklists, including PhishDestroy and PhishingDB, and is flagged by Google Safe Browsing.

This domain, created on February 21, 2026, was operational for a short period before being taken offline. The page title indicates it was parked at Timeweb, suggesting a possible misuse of hosting services to facilitate phishing activities. The platform risk score of 83 out of 100 underscores the potential danger it posed during its active period.

Phishing domains like cn423114-wordpress-t2otc.tw1.ru exploit the time window between registration and detection by antivirus databases. PhishDestroy's detection pipeline captures such threats early, often before they appear on traditional security radars. The swift takedown of this domain highlights the effectiveness of timely detection and response in mitigating phishing risks.