meritkiralama[.]com

The domain meritkiralama.com was registered on 26 January 2026 through Ultahost, Inc. and is currently active. Analysis classifies it as a generic phishing site targeting corporate users, as indicated by the page title “Online Kurumsal Filo” which mimics a fleet management portal. The site returns HTTP 200 and serves a TLS certificate issued by Google Trust Services. Infrastructure observation shows the domain resolves to IP 188.114.97.3, a Cloudflare‑owned address located in Canada. Authoritative nameservers are aleena.ns.cloudflare.com and memphis.ns.cloudflare.com, confirming Cloudflare as the DNS provider. The web server runs Plesk with PHP, and the front‑end uses Bootstrap, Slick, jQuery, FancyBox and Google Analytics, while Cloudflare Browser Insights is also detected. Threat intelligence reveals that 13 out of 95 VirusTotal scanners flagged the site as malicious, and Gridinsoft assigns a trust score of 0 / 100. The domain is listed on one public blocklist and has been actively blocked by PhishDestroy. These indicators, combined with the generic phishing classification and high risk rating, suggest the site is being used to harvest credentials from unsuspecting visitors. Defenders should add meritkiralama.com to URL filtering and endpoint blocklists, and consider blocking the associated IP 188.114.97.3 at the network perimeter. Monitoring for DNS queries to the Cloudflare nameservers can help detect internal attempts to reach the site. Continuous re‑evaluation is advised, as the operator may shift hosting or modify the page content to evade detection.