app[.]claim-merkle[.]xyz

The domain app.claim-merkle.xyz is a confirmed phishing site impersonating the brand "across," with a critical threat score of 95/100. The site is currently down, indicating it has likely been taken down due to its malicious activities. VirusTotal reports that 12 out of 95 security vendors have flagged this domain as malicious, including notable names such as Kaspersky and BitDefender. It is also listed on one public blocklist, although Google Safe Browsing has not flagged it.

Registrar information is not available, suggesting potential use of privacy protection. The domain was created on 2026-02-21 and was first detected on 2026-02-26. The hosting IP is 104.21.91.112. Given the critical threat level, block the domain at the perimeter and flag the IP as an IOC for further investigation.