The domain mega-zerkala.com was registered on July 19, 2026 through Fewmoretaps OU d/b/a Trustname.com and is currently resolved to the IP address 104.21.74.141. Its authoritative name servers are igor.ns.cloudflare.com and jean.ns.cloudflare.com, indicating the use of Cloudflare’s DNS infrastructure. As of the report date, July 30, 2026, the domain remains active and is listed on a single security blocklist.
The PhishDestroy project has already blocked the domain, providing an early mitigation layer for downstream defenders. VirusTotal records show that the domain has been examined by 91 independent scanning engines, none of which have generated a detection flag at the time of analysis; this absence of flags does not constitute assurance of benign behavior, as detection coverage may be incomplete. No additional public intelligence, such as Safe Browsing status, SSL certificate details, HTTP response codes, or page title information, is currently available, leaving the exact payload and target brand unverified.
Consequently, uncertainty remains regarding the specific phishing lures employed and the extent of victim exposure. Defensive teams should consider proactively adding mega-zerkala.com to DNS‑based filtering rules, monitor for any subsequent appearance on additional blocklists, and conduct periodic re‑scans with VirusTotal or similar services to capture emerging detections. Continuous observation of the hosting IP 104.21.74.141 for anomalous traffic patterns is also advised, as the infrastructure may be repurposed for related malicious campaigns.