trademonex[.]com

Analysis indicates that trademonex.com is an active social media phishing infrastructure. The domain was registered on 21 February 2026 through Key‑Systems GmbH and uses the nameservers ns1.emailverification.info and ns2.emailverification.info. DNS resolution points to 172.67.163.22, an address owned by Cloudflare (AS13335) located in the United States. The site delivers an HTTP 200 response and presents no TLS certificate, exposing all traffic to potential interception. VirusTotal scans report nine of ninety‑three security vendors flagging the domain, and it is listed on a public phishing blocklist (PhishDestroy) as well as one additional security blocklist. The page title returned is simply “trademonex.com”, and no further content has been publicly disclosed. Given the high‑risk rating and confirmed phishing classification, defenders should block the domain at perimeter and DNS layers, monitor for related IP activity, and consider sink‑holing the IP address. Continuous re‑assessment is advised, as the underlying payload and phishing pages have not been observed.