cw609114-wordpress-q9s4f[.]tw1[.]ru

The domain cw609114-wordpress-q9s4f.tw1.ru has been identified as a high-risk social engineering phishing domain. As of July 12, 2026, the domain remains active and is blocked by PhishDestroy and PhishingDB, two reputable security blocklists. Analysis indicates that 13 out of 95 security vendors on VirusTotal have flagged this domain, highlighting a significant level of suspicion among the cybersecurity community. The domain resolves to the IP address 92.53.96.105 and is registered through TW-Cloud, an entity associated with ASN 9123. The page title displayed when the domain is accessed is 'Домен припаркован в Timeweb', which translates to 'Domain parked at Timeweb'. This phrasing suggests that the domain may be under temporary management or parked, but the presence on multiple blocklists and the high risk level indicate that it is likely being used for malicious purposes. Gridinsoft has assigned this domain a trust score of 0 out of 100, the lowest possible score, further corroborating the high-risk nature of the domain. Defenders should treat any traffic to this domain with extreme caution, implementing strict network monitoring and filtering rules to prevent access. Despite the domain being parked, the SSL certificate issued by GlobalSign nv-sa suggests an attempt to lend legitimacy to the site, which is a common tactic in phishing campaigns. The exact content and purpose of the site have not yet been fully analyzed, but the current evidence strongly suggests that it poses a significant threat and should be avoided by all users. Security teams are advised to add this domain to their blocklists and to educate users about the risks of social engineering attacks and phishing. Regular updates should be performed to ensure that any new threats associated with this domain are promptly identified and mitigated.