merenciano[.]net

The domain merenciano.net is presently classified as a high‑risk generic phishing site. It was created on 26 August 2008 and remains active as of the report date 12 July 2026. The site returns HTTP 200 responses and advertises the page title “merenciano abogados s.a.p.”, indicating an apparent association with a legal entity. Google Safe Browsing lists the domain under the SOCIAL_ENGINEERING category, and multiple security aggregators such as PhishDestroy and PhishingDB have added it to their blocklists. Infrastructure analysis shows the domain is registered through IONOS SE and resolves to the IPv4 address 217.160.0.227, which is allocated to AS8560 IONOS SE in Germany. The authoritative name servers are ns1081.ui-dns.biz, ns1081.ui-dns.com, ns1081.ui-dns.de, and ns1081.ui-dns.org, all hosted by the same provider. The web server identifies as Apache HTTP Server, and the TLS certificate is issued by Sectigo Limited under the Sectigo Public Server Authentication CA DV R36 chain, confirming the use of a publicly trusted certificate. Reputation signals reinforce the malicious profile. Gridinsoft assigns a trust score of 0 out of 100, effectively flagging the site as completely untrusted. VirusTotal records 17 detections out of 95 scanned security vendors, and the domain appears on two external blocklists. AlienVault OTX references the domain in twenty separate threat‑intelligence pulses, demonstrating ongoing observation by the community. Defenders should prioritize immediate blocking of merenciano.net at network perimeter and endpoint layers. Continuous monitoring of the associated IP address and its name‑server set is advised to detect potential re‑hosting or pivot activity. Incident response teams should incorporate the domain into phishing‑specific detection rules and educate users about the risk of unsolicited communications that reference legal services, as the site’s title suggests a targeted social‑engineering approach.