tempestmineralsinc[.]com

tempestmineralsinc.com was registered on 21 Feb 2026 via Network Solutions, LLC and is hosted on an IP address (66.29.141.34) owned by Namecheap, Inc. The site presents a valid Sectigo RSA Domain Validation certificate issued to Sectigo Limited, indicating the use of a standard DV SSL. The domain resolves through the authoritative name servers dns1.namecheaphosting.com and dns2.namecheaphosting.com, both typical of Namecheap’s shared hosting environment.

A request to the root URL returns HTTP 200 and the page title “Tempest Minerals || Index Page”. The content does not contain any overt malicious payloads, but the domain is listed on a security blocklist and has been flagged by PhishDestroy as part of a generic phishing operation. The blocklist entry is the only external indicator of compromise, and no detections have been reported on VirusTotal to date.

Infrastructure analysis shows the site is hosted in the United States under ASN 22612, the Namecheap network. The low‑cost hosting profile, combined with the recent registration date and the generic branding in the page title, matches patterns observed in credential‑harvesting campaigns that impersonate corporate or mineral‑industry entities. The presence of a legitimate SSL certificate is a common tactic to increase user trust and avoid browser warnings.

Defenders should add tempestmineralsinc.com to deny‑list rules for web proxies and DNS filtering, and monitor for any outbound connections to the IP 66.29.141.34 that may indicate successful phishing attempts. Threat‑intel teams are advised to collect any phishing emails that reference this domain, extract indicators such as URLs or email subjects, and share them with upstream feeds. Continuous re‑scanning of the domain on multi‑engine services is recommended, as the lack of current detections does not preclude future payload deployment.