suenosdeunaprincesa[.]com[.]gt

Analysis of suenosdeunaprincesa.com.gt indicates a high-risk brand impersonation domain targeting WordPress users. The domain was registered on February 21, 2026, and is currently offline. Infrastructure analysis reveals it resolved to 192.249.113.194, hosted by InMotion Hosting, Inc. (AS22612) in the United States. The page title, 'Web Hosting by InMotion Hosting,' does not align with the domain name, suggesting an attempt to mislead users into believing the site is associated with legitimate hosting services or WordPress.

The domain appears on four security blocklists and is flagged in 13 AlienVault OTX threat intelligence pulses, indicating prior malicious activity. Sixteen of 93 security vendors on VirusTotal detect this domain as malicious. Additional blocking by PhishDestroy, Polkadot, Enkrypt, and Codeesura further confirms its classification as a phishing threat. The SSL certificate is rated R10, which may indicate a low-trust or misconfigured certificate.

Defenders should treat this domain as confirmed malicious due to its presence on multiple blocklists, detection by security vendors, and association with known brand impersonation tactics. While the domain is currently offline, historical resolution data and threat intelligence pulses suggest it was actively used in phishing campaigns. Organizations should monitor for any reactivation or related infrastructure and ensure endpoint protection and email filtering systems are updated to block this domain and its associated IP. No evidence of a specific phishing kit or additional malicious payloads is currently available, but the domain's registration and hosting details align with known phishing patterns.