00d94bf3262617342[.]tempsite[.]link

This domain, 00d94bf3262617342.tempsite.link, is actively flagged as a high-risk brand impersonation threat targeting WordPress. Analysis indicates the domain was registered on March 13, 2019, through Tucows Domains Inc., and currently resolves to the IP address 205.134.241.149. Security vendors have detected malicious activity associated with this domain, with 16 out of 95 engines on VirusTotal identifying it as harmful. The domain appears on three security blocklists, including PhishDestroy, PhishingDB, and BLP-Malware, reinforcing its classification as an active threat. The page title, 'Home | Soller Environmental, LLC,' does not align with the identified brand impersonation of WordPress, suggesting the domain may host multiple campaigns or redirect to different malicious content. The SSL certificate is issued by Let's Encrypt, which is commonly used by both legitimate and malicious sites, providing no definitive indication of trustworthiness. The domain's infrastructure, including its registration details and hosting IP, does not exhibit immediate anomalies, but its prolonged existence since 2019 may indicate persistent abuse. Defenders should treat this domain as an active phishing threat, particularly given its explicit targeting of WordPress users. Network-level blocking is recommended, as the domain remains unresolved in multiple security feeds. While the exact content of the site has not been analyzed, the combination of brand impersonation flags, blocklist inclusions, and vendor detections justifies immediate containment measures. Further investigation into the hosting IP (205.134.241.149) may reveal additional associated threats or infrastructure shared with other malicious domains.