persimmontrades[.]com

Analysis of persimmontrades.com was performed on July 27, 2026. The domain is registered through Dreamscape Networks International Pte Ltd and was created on October 17, 2023. It is served by the authoritative name servers ns1.zencorehost.com and ns2.zencorehost.com and resolves to the IPv4 address 5.182.208.206. VirusTotal reports that 10 of 91 security vendors flag the domain as malicious, indicating a moderate consensus of compromise.

The domain appears on a single external blocklist and is actively blocked by the PhishDestroy service, confirming that at least one dedicated anti‑phishing platform has taken mitigation action. The threat type is classified as generic phishing, and the current status remains active. No publicly available evidence regarding the site’s SSL certificate, HTTP response codes, page title, or targeted brand has been disclosed, limiting the ability to describe the exact phishing lure employed. Consequently, analysts cannot confirm whether the site hosts credential‑stealing forms, redirects, or other malicious payloads.

The limited visibility suggests that the infrastructure may be purpose‑built for short‑term campaigns, relying on the reputation of the domain registrar and the benign‑looking nameservers to evade cursory checks. Defenders should add persimmontrades.com to local DNS blocklists and firewall deny lists, monitor outbound connections to 5.182.208.206, and consider sharing the indicator set with upstream threat‑intelligence feeds. Continuous re‑scanning on platforms such as VirusTotal is recommended to capture any change in detection ratios. Organizations that employ email filtering should treat any messages containing links to this domain as suspicious and quarantine them pending further verification.