cb668399-wordpress-oyfoc[.]tw1[.]ru

The domain cb668399-wordpress-oyfoc.tw1.ru has been identified as a generic phishing threat, currently taken offline. This domain was engaged in credential theft or other fraudulent activities, though it does not specifically impersonate a well-known brand. Its registration through TIMEWEB-RU and creation date of June 29, 2006 suggest it may have been repurposed for malicious use.

According to security intelligence, the domain is flagged by 12 of 95 VirusTotal vendors, indicating widespread detection. It resolves to IP address 198.18.2.43 and appears on two security blocklists. The SSL certificate is issued by GlobalSign nv-sa / GlobalSign GCC R3 DV TLS CA 2020, and the page title displayed was "Домен припаркован в Timeweb," further confirming its hosting on Timeweb infrastructure.

As of the latest analysis, the domain is offline, which reduces immediate risk. However, users should remain vigilant against similar domains and avoid clicking suspicious links. PhishDestroy recommends blocking this domain across all network perimeters, monitoring for related domains, and educating users on phishing recognition. If any credentials were entered, they should be changed immediately and accounts monitored for unauthorized access.