ca377297-wordpress-11tvg[.]tw1[.]ru

Analysis indicates the domain ca377297-wordpress-11tvg.tw1.ru remains active with a creation date of June 29 2006 and registration through TIMEWEB-RU. It resolves to IP address 92.53.96.105 and carries an SSL certificate issued by GlobalSign nv-sa. The domain is classified under brand impersonation targeting wordpress with a reported high risk level and an active status as of the July 12 2026 report date. Infrastructure analysis reveals Google Safe Browsing detection for SOCIAL_ENGINEERING along with presence on two security blocklists including PhishDestroy and PhishingDB.

VirusTotal data shows 12 out of 95 security vendors flagging the domain while Gridinsoft assigns a trust score of 0 out of 100 and Scamadviser assigns 1 out of 100. The recorded page title is Домен припаркован в Timeweb which provides limited insight into hosted content. These indicators establish a pattern of elevated threat association without confirming operational details such as payload delivery mechanisms or specific campaign linkages.

Uncertainty persists regarding the exact current function of the domain because direct site analysis has not been performed beyond the provided page title and external flags. The long registration history combined with recent detections suggests possible reuse or reactivation rather than a newly registered asset. Defenders should treat the domain as a confirmed high-risk indicator based on the vendor consensus and blocklist entries.

Recommended actions include immediate blocking of the domain and its resolving IP 92.53.96.105 at network perimeters and DNS layers. Security teams should monitor for related subdomains or variations that incorporate wordpress references and update threat intelligence feeds with the observed VirusTotal ratio and blocklist memberships. Continuous verification against Google Safe Browsing is advised to track any changes in the SOCIAL_ENGINEERING classification.