scromegatrade[.]com

Analysis indicates that scromegatrade.com was registered on October 10, 2025 through OwnRegistrar, Inc. The domain remains active as of the report date, July 27, 2026. It resolves to the IPv4 address 158.220.124.22 and uses the authoritative name servers ns1.zunxoo.com and ns2.zunxoo.com, with a third entry labeled null. The domain appears on a single security blocklist and is explicitly blocked by the PhishDestroy service, confirming that at least one reputable phishing mitigation platform has taken action against it. VirusTotal scans show that four of ninety‑one security vendors have flagged the domain, suggesting that a minority of detection engines have identified malicious behavior, while the majority have not raised an alert.

The limited detection coverage, combined with the presence on a blocklist, points to a high‑risk profile for the domain. The available data does not include a publicly documented page title, SSL certificate details, HTTP response codes, or any additional reputation scores, leaving those aspects unverified. Consequently, defenders cannot assess whether the site serves a specific brand lure or employs particular phishing kits. The lack of further telemetry means that the exact malicious payload or victim targeting remains uncertain.

Given the confirmed blocklist entry, the active registrar, and the observed IP address, security operators should consider adding scromegatrade.com and its resolved IP 158.220.124.22 to network deny lists and endpoint web filtering policies. Continuous monitoring of the associated name servers ns1.zunxoo.com and ns2.zunxoo.com is recommended, as changes could indicate infrastructure scaling. Analysts should also query additional threat intel sources for any emerging indicators, such as URL patterns or email campaign samples that reference the domain. Until further evidence is gathered, the domain should be treated as a high‑risk phishing vector and blocked wherever feasible.