scorecaphq[.]com

This report analyzes the domain scorecaphq.com, which is currently flagged as a generic phishing threat. The domain was created on July 29, 2026, and remains active as of the report date of August 05, 2026. It is registered through Global Domain Group LLC. Infrastructure analysis shows the domain uses Cloudflare nameservers, specifically robin.ns.cloudflare.com and watson.ns.cloudflare.com, and resolves to the IP address 172.67.132.90. This IP is associated with Cloudflare's hosting infrastructure, which is commonly used to obscure the origin server of malicious sites.

The domain has been scanned by 91 vendors on VirusTotal, and none of them currently flag it. However, the absence of detections is not proof that the domain is safe. It is important to note that the domain does appear on one security blocklist, specifically PhishDestroy, which suggests that at least one independent security source has identified it as a potential threat. No data is available from Google Safe Browsing or AlienVault OTX in the provided intelligence, so those checks could not be performed.

The exact content hosted on scorecaphq.com has not yet been analyzed. No page title, brand target, or specific scam kit has been identified. The classification as a generic phishing domain is based on the blocklist listing and the threat type designation, but the specific lure or impersonation tactic is unknown at this time. Defenders should not assume the domain is benign simply because of the low detection rate. The domain's recent creation date and the fact that it is already on a blocklist are notable indicators.

Recommended actions for defenders include monitoring the domain for changes in DNS records or content, adding it to internal threat intelligence feeds, and blocking access at the network level if users are at risk. Since the domain is still active, it could be used to host phishing pages at any moment. Organizations should treat any emails or messages referencing scorecaphq.