v15563[.]cc

The domain v15563.cc was created on April 22, 2026 and is registered through NameSilo, LLC. It is delegated to the Cloudflare nameservers dom.ns.cloudflare.com and pat.ns.cloudflare.com, and resolves to the IPv4 address 23.224.199.162, which belongs to CloudRadium L.L.C. in the United States. The site serves an HTTP 200 response and presents a ZeroSSL ECC DV SSL certificate issued by ZeroSSL GmbH, confirming the presence of active web infrastructure.

Intelligence sources label the domain as a generic_phishing threat with a high risk rating and an active status. It appears in one AlienVault OTX pulse and is listed on three security blocklists. The domain is actively blocked by PhishDestroy, MetaMask, and SEAL, and a Gridinsoft trust score of 0 out of 100 further underscores its malicious reputation. VirusTotal analysis shows that six out of ninety‑five scanning engines have flagged the domain as malicious, providing additional corroboration of its hostile intent.

While the available data confirms the domain’s malicious classification, details regarding the specific phishing content, targeted brands, or credential‑harvesting mechanisms remain unavailable. No public payload samples or page screenshots have been disclosed, limiting the ability to assess the full scope of the campaign or the techniques employed by the operators.

Defenders should treat v15563.cc as a high‑confidence indicator of compromise. Recommended actions include adding the domain and its resolving IP address to network denylists, monitoring DNS queries for related resolutions, enforcing TLS inspection to capture any encrypted payload, and ensuring that endpoint security solutions are updated to recognize the six VirusTotal detections. Sharing these indicators with broader threat‑intel communities will aid in early detection of related phishing attempts.