mainnetd[.]app

The domain mainnetd.app was registered on March 26 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and is currently delegated to the Cloudflare nameservers mona.ns.cloudflare.com and morgan.ns.cloudflare.com. DNS resolution points to the IP address 188.114.97.3, which is hosted by Cloudflare, Inc. in Canada. An SSL certificate issued by Google Trust Services (WE1) is active, but HTTP requests return a 403 status and the page title is limited to “Just a moment…”. VirusTotal reports that six of ninety‑four scanning engines have flagged the domain, and Gridinsoft assigns a trust score of 0 / 100. The domain appears on one public blocklist and is referenced in a single AlienVault OTX pulse. PhishDestroy has also listed the domain as blocked. Risk rating is high and the infrastructure is still active. Analysis indicates that the domain is being used for a generic phishing campaign, although no payload or target brand information has been disclosed. The presence of multiple security detections, a zero trust score, and inclusion on blocklists suggest malicious intent, but the exact phishing vector and victim profile remain unknown. Defenders should add 188.114.97.3 and the domain mainnetd.app to deny‑list rules, monitor DNS queries for the associated Cloudflare nameservers, and enforce TLS inspection to capture any redirected traffic. Continuous re‑scanning is advised to capture any changes to the site’s content or additional detections.