merikting5010[.]com

Analysis of merikting5010.com indicates an active generic phishing infrastructure as of July 19, 2026. The domain returns HTTP 200, suggesting a live web service, and is currently blocked by the PhishDestroy sinkhole network. Reputation services on VirusTotal have flagged the domain by five out of ninety‑one security vendors, reinforcing the high‑risk classification. DNS resolution points to 185.53.179.136, an address hosted in Germany and operated by the TEAM‑INTERNET network. The authoritative name servers are ina1.registrar.eu, ina2.registrar.eu, and ina3.registrar.eu, all under the registrar Hosting Concepts B.V. d/b/a Registrar.eu. The IP address appears on a single public blocklist, indicating limited but existing detection by external filters. While the site content has not been publicly dissected, the combination of HTTP response, VT detections, and sinkhole block suggests malicious credential‑harvesting activity. Uncertainty remains regarding the specific phishing campaign targets and the presence of additional supporting infrastructure such as command‑and‑control servers or credential‑stealing payloads. Defenders should continue to block merikting5010.com at perimeter devices, monitor DNS queries for the associated nameservers, and add the IP address 185.53.179.136 to deny lists. Ongoing observation of traffic to the domain and periodic re‑scans on VirusTotal are recommended to capture any escalation in detection counts or changes in hosting posture.