main15[.]net

This domain, main15.net, is flagged as an active phishing threat with a high-risk classification. Registered on February 21, 2026, through Namemart Limited, the domain remains operational as of July 13, 2026. Infrastructure analysis reveals it resolves to IP address 172.67.184.88, hosted on AS13335 (Cloudflare, Inc.) in the United States. The domain employs Cloudflare nameservers (georgia.ns.cloudflare.com, west.ns.cloudflare.com) and an SSL certificate issued by Google Trust Services (WE1), indicating a standard but potentially abused configuration for phishing operations. Detection data shows the domain appears on two security blocklists, including PhishDestroy and ScamSniffer. Three of 93 security vendors on VirusTotal have flagged the domain, though the exact nature of the phishing content remains unconfirmed due to limited public analysis. Technologies detected include Vue.js and HTTP/3, suggesting a modern web framework likely used to enhance the site's appearance or functionality for malicious purposes. Defenders should prioritize blocking or monitoring traffic to this domain, particularly given its Cloudflare hosting, which may complicate takedown efforts. The domain's registration age (under five months) and continued activity align with typical phishing campaign lifecycles. No specific brand or scam type has been identified in available data, so further investigation into the page content is recommended to determine the exact threat vector. Organizations should treat this domain as hostile until proven otherwise, given its presence on multiple blocklists and active status.