MALICIOUS — HIGH
u15[.]info
The domain u15.info is a generic phishing site posing an elevated risk of credential theft or fraudulent activity.
- VirusTotal
- 1/91
- Blocklists
- No stored match
- Disponibilità
- Ultimo attivo conosciuto · HTTP 200
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
u15.info — Ultimo attivo conosciuto (HTTP 200). Simulazione del marchio: Cloudflare; Tipo di truffa: Brand Impersonation. Riepilogo delle prove: VirusTotal 1/91 (Chong Lua Dao); PhishDestroy score 65/100. Registrar: NameCheap.
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
Evidence Analysis
The domain u15.info is a generic phishing site posing an elevated risk of credential theft or fraudulent activity. It does not impersonate a specific brand or deploy a known crypto drainer kit. As of the latest verification, u15.info has been taken offline, though prior activity classified it as a phishing threat.
Technical indicators confirm u15.info was flagged by 8 of 95 VirusTotal security vendors, including ADMINUSLabs, alphaMountain.ai, and CRDF. The domain was registered through NameCheap, Inc. on February 21, 2026, and resolved to the IP address 188.114.96.3, hosted by Cloudflare, Inc. (AS13335) in the US. It appeared on one security blocklist (PhishDestroy) and was detected in two AlienVault OTX threat intelligence pulses. The SSL certificate was issued by Google Trust Services (WE1), and the observed page title read 'Access denied | u15.info used Cloudflare to restrict access | u15.info | Cloudflare'. Technologies detected included HSTS and Cloudflare, with a Gridinsoft trust score of 0/100.
Victims of u15.info should immediately change any credentials entered on the site, enable two-factor authentication (2FA) on affected accounts, and monitor for unauthorized transactions or identity fraud. Report the domain to Google Safe Browsing, PhishTank, or local cybercrime authorities to aid in takedown efforts. If financial or crypto accounts were exposed, revoke token approvals and consider transferring funds to a new wallet for added security.
Copertura dei dati12 recorded checks
Informazioni sulla sicurezza di rete
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Acquisizione salvata
Analisi dei domini
Dettagli tecniciDNS, SAN SSL, timestamp
ICANN OVERSIGHT
Accreditamento e contesto RAA
Accreditamento e contesto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Tecnologie · 2 identified
HTTP Strict Transport Security — forces browsers to use HTTPS connections only.
Web infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comAnalisi di VirusTotal
Prove archiviate
Analisi delle prestazioni del sito
Google PageSpeed Insights — mobile performance audit of u15.info · checked Mar 2, 2026
Dati e relazioni esterneIndependent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.