# megaonion.cc — SUSPICIOUS

> Warning: megaonion.cc is a fake login scam. Created August 2022 and on one blocklist, it poses a risk. Verify safety on PhishDestroy before visiting!

## Summary
PhishDestroy is investigating megaonion.cc as a site involved in fake login scams. The domain is currently active and poses a threat to users who may be tricked into entering credentials on a fraudulent page.

The domain megaonion.cc was created on August 19, 2022, and resolves to IP address 188.114.96.3. It uses an SSL certificate issued by Google Trust Services and was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. Currently, it is flagged by one security blocklist and has a VirusTotal score of 0/95.

Given the confirmed presence on a security blocklist and the risk of credential harvesting via fake login pages, megaonion.cc remains an active threat. Users are strongly advised to avoid this domain. Additional investigation is ongoing to determine the scope and target of this fake login campaign. Blocklisting of the domain is recommended to prevent accidental access.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2022-08-19 12:20:50
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["OISD"]

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/909f396b-9715-48d4-89eb-8ec6d9b9781b
- PhishDestroy: https://phishdestroy.io/domain/megaonion.cc/
- LLM endpoint: https://phishdestroy.io/domain/megaonion.cc/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/megaonion.cc/
Last updated: 2026-03-26