mainnets-ptb[.]com

Analysis of mainnets-ptb.com indicates a brand impersonation campaign targeting Google. The domain was registered on October 22, 2025 through OwnRegistrar, Inc. and currently resolves to IP address 142.250.184.206, which is announced as part of AS15169 owned by Google LLC and geolocated in the United States. No TLS certificate is presented, leaving the site exposed to clear‑text interception. The page title returned from the server is the literal URL https://mainnet-e1n.pages.dev/, providing no additional context about the content hosted.

Gridinsoft assigns a trust score of 0 out of 100, reflecting a highly suspicious reputation. The domain appears on two external blocklists and has been actively flagged by PhishDestroy and ScamSniffer, confirming its recognition by anti‑phishing community tools. VirusTotal reports that the domain was examined by 95 scanning engines without any detections, but the absence of detections does not constitute proof of benign intent. The site is presently offline, yet its infrastructure remains reachable and could be reactivated.

Defenders should add the domain and its associated IP to network deny lists, monitor DNS queries for similar Google‑related subdomains, and enforce strict TLS verification to prevent accidental connections to non‑encrypted endpoints. Continuous scanning of the IP range owned by AS15169 for emergent malicious activity is advised, as well as periodic review of blocklist updates to capture any re‑emergence of the domain. Organizations should also educate users about the lack of a valid SSL certificate and the presence of a misleading page title, reinforcing the policy to avoid entering credentials on unauthenticated sites that claim to represent Google.