vk15[.]pro

vk15.pro was registered on July 29, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED. The domain resolves to the IPv4 address 107.189.18.67 and is served by Cloudflare name servers kristin.ns.cloudflare.com and rodrigo.ns.cloudflare.com. As of the report date (August 01, 2026) the domain remains active and has been observed on a single security blocklist. PhishDestroy has already added the domain to its blocklist, indicating that at least one anti‑phishing service considers it malicious.

VirusTotal records show that the domain has been scanned by 91 antivirus and URL‑reputation engines; none of the scanners have raised a detection at the time of analysis. The absence of detections should not be interpreted as an indication of safety, nor does it confirm benign intent. No public information is available regarding SSL certificate details, HTTP response codes, page title, or any observed phishing kit. Consequently, the precise content and target of the phishing campaign remain unknown.

The limited visibility suggests a short‑lived or early‑stage operation, but the presence of the domain on a blocklist and its rapid registration imply a purposeful malicious use. Defenders should add the domain to internal block lists, monitor DNS queries for the IP 107.189.18.67, and continue to observe any future resolutions or content changes. Continuous re‑scanning with multi‑engine services such as VirusTotal is recommended to capture any later detections. Organizations employing email or web filtering should ensure that traffic to vk15.pro is denied, and incident response teams should be prepared to investigate any user reports that reference this domain.