scorecapone[.]com

Analysis indicates that the domain scorecapone.com was registered on July 29, 2026 through Global Domain Group LLC and is presently resolved to the Cloudflare edge address 172.67.152.83. The authoritative name servers robin.ns.cloudflare.com and watson.ns.cloudflare.com confirm that the domain is hosted behind Cloudflare’s CDN, a pattern frequently observed in phishing infrastructure to hide origin servers and to leverage the provider’s large network for rapid content delivery. The domain appears on a single security blocklist and has been explicitly flagged by the PhishDestroy feed, confirming that threat‑intelligence sources consider it malicious. VirusTotal reports that the domain was examined by 91 scanning engines, none of which produced a detection at the time of analysis.

The lack of detections does not constitute evidence of benign intent; recent registrations often evade signature‑based scanners until payloads are observed. No additional public reputation services, such as Google Safe Browsing, OTX, or SSL/TLS trust scores, have been disclosed in the available data, leaving the broader reputation profile unknown. Page title, SSL certificate details, and target brand information have not been published, so the exact phishing lure remains unverified. Given the recent creation date, the use of Cloudflare infrastructure, and the inclusion on a dedicated phishing blocklist, defenders should treat scorecapone.com as a high‑confidence phishing indicator.

Recommended mitigation steps include adding the domain to DNS‑based deny lists, updating web‑proxy and firewall rules to block HTTP/S traffic to the IP 172.67.152.83, and monitoring for any future resolution changes or additional detections from sandbox environments. Organizations are also advised to incorporate the indicator into SIEM correlation rules, enforce email filtering for messages that reference the domain, and periodically review threat‑intel feeds for new attributes.