strideenterprisesltd[.]com[.]mainlinesecuritiesltd[.]com

The domain strideenterprisesltd.com.mainlinesecuritiesltd.com was registered on March 11, 2026 and resolves to the IPv4 address 192.142.10.5. The host IP is located in the Netherlands and is announced by AS214036, operated by Ultahost, Inc. All four authoritative name servers (ns1.ultahost.com through ns4.ultahost.com) resolve to the same infrastructure, indicating a single‑provider deployment.

When accessed, the site returns HTTP status 200 and serves a page titled "Home". The front‑end stack includes Bootstrap, LiteSpeed, jQuery, Popper, Slick, OWL Carousel, Smartsupp, and a Twitter widget, suggesting a template‑driven campaign rather than a bespoke malicious portal. The site presents a valid TLS certificate issued by Let's Encrypt under the identifier YE2, which may lend an appearance of legitimacy to unsuspecting victims.

Threat intelligence classifies the domain as a generic phishing operation. This assessment aligns with the observed use of common phishing‑kit components and the presence of user‑interaction widgets that can be leveraged to harvest credentials. VirusTotal analysis shows that 4 out of 95 security vendors flag the domain, and Gridinsoft assigns a trust score of 0 out of 100. The domain is currently listed on one public blocklist and has been actively blocked by the PhishDestroy mitigation service.

Defenders should prioritize immediate containment of the domain. Recommended actions include adding the domain and its resolving IP address to network blocklists, deploying sinkhole redirects for any outbound requests, and updating intrusion‑detection signatures to match the observed technology fingerprint. Organizations should also enforce TLS inspection for outbound HTTPS traffic to detect credential‑harvesting forms, and notify end‑users about the specific domain to reduce the risk of successful credential submission. Coordination with Ultahost, Inc. may facilitate takedown or mitigation of the hosting environment.