main-wojak[.]com

Analysis of the domain main-wojak.com shows a newly registered site (creation date 27 May 2026) that is currently active and classified as a generic phishing threat with a high risk rating. The domain is delegated to Cloudflare name servers (damiete.ns.cloudflare.com and suzanne.ns.cloudflare.com) and resolves to the IP address 188.114.97.3, which is owned by Cloudflare, Inc. and geolocated to Canada. TLS is provided by a Let's Encrypt certificate (issuer E7), but HTTP requests return a 403 status code, indicating the server is intentionally denying access to direct requests. The site has been added to at least one security blocklist and is flagged by the PhishDestroy blocking service. Independent scanning on VirusTotal reported that 2 of 91 security vendors flagged the domain, suggesting a low but non‑zero detection rate. Gridinsoft assigns the domain a trust score of 0 out of 100, reinforcing the suspicion of malicious intent. While the page title currently displays "Just a moment...", no further content analysis is available, leaving the exact phishing payload or targeted brand undefined. Defenders should block the domain at network perimeters, monitor DNS queries for the associated Cloudflare name servers, and consider adding the IP address to reputation‑based deny lists. Ongoing observation is advised to capture any changes in HTTP response or additional detections that could clarify the threat's operational details.