cq107205-wordpress-h0vfc[.]tw1[.]ru

This domain, cq107205-wordpress-h0vfc.tw1.ru, is actively flagged for high-risk brand impersonation targeting WordPress. Analysis indicates the domain resolves to 92.53.96.105 (AS9123, RU) and is registered through TW-Cloud. The page title, 'Домен припаркован в Timeweb,' suggests it is hosted on Timeweb infrastructure, though the domain is not a legitimate parked page—it is blocked by two security blocklists (PhishDestroy, PhishingDB) and assigned a trust score of 1/100 by Scamadviser and 0/100 by Gridinsoft. The SSL certificate is issued by GlobalSign (GCC R3 DV TLS CA 2020), which does not mitigate the risk given the domain's malicious classification. A VirusTotal scan reports 11 of 95 security vendors detecting the domain as malicious, reinforcing its high-risk status. The domain returns an HTTP 302 redirect, a common tactic to obscure final landing pages or distribute further malicious payloads. Nameservers (ns1.timeweb.ru, ns2.timeweb.ru, ns3.timeweb.org, ns4.timeweb.org) align with the hosting provider, but this does not reduce the threat level. Defenders should treat this domain as actively malicious, block resolution at the DNS level, and monitor for related infrastructure (e.g., 92.53.96.105, AS9123). No additional details about the exact content or attack chain are available, but the combination of brand impersonation, low trust scores, and blocklist presence justifies immediate containment.