mega-0nion[.]com

Analysis of mega-0nion.com indicates that the domain was registered on July 19, 2026 through Fewmoretaps OU d/b/a Trustname.com and is currently active. The authoritative name servers are igor.ns.cloudflare.com and jean.ns.cloudflare.com, pointing to Cloudflare’s infrastructure. DNS resolution returns the IPv4 address 104.21.12.22, a Cloudflare edge node that masks the true hosting location and complicates direct attribution.

The domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy feed, reinforcing its classification as a phishing resource. VirusTotal records show that the domain was scanned by 91 different vendors, none of which reported a detection; however, the absence of detections does not constitute evidence of benign intent and should be weighed against other indicators. No public information is available regarding Safe Browsing status, Open Threat Exchange references, SSL certificate details, HTTP response codes, trust‑score metrics, page title, or ancillary evidence links, leaving those aspects of the payload unverified.

Defenders should therefore treat the domain as malicious until further forensic data clarifies its behavior. Recommended mitigations include adding the domain to internal URL filtering lists, monitoring DNS queries for the 104.21.12.22 address, and employing threat‑intelligence feeds that reference PhishDestroy. Continuous re‑evaluation is advised, especially if future scans reveal detections or additional blocklist listings emerge.