xn--meritkng5011-4j6f[.]com

The domain xn--meritkng5011-4j6f.com was registered on June 11, 2026 through Dynadot Inc. It resolves to the IP address 104.21.72.85, which is currently the only observable hosting indicator. The domain is listed on a single security blocklist and has been explicitly blocked by the PhishDestroy mitigation service. VirusTotal analysis shows that 12 of 91 security vendors have flagged the domain as malicious, indicating a moderate consensus among automated scanners that the infrastructure is associated with phishing activity.

The operational status is marked as active and the risk level has been assessed as elevated, reflecting the combination of recent creation, active hosting, and vendor detections. No additional intelligence such as SSL certificate details, Safe Browsing verdicts, Open Threat Exchange reports, or page title information is available at this time, leaving the exact content and luring technique unverified. Defenders should consider immediate containment measures: block the domain and its resolving IP at network perimeter devices, update local and cloud‑based blocklists with the domain, and monitor for any outbound connections to 104.21.72.85 from internal assets.

Continuous re‑assessment is advised, as further analysis of the hosted page, HTTP response headers, and potential credential‑stealing forms may reveal additional indicators that can refine detection rules. Organizations should also verify that end‑user security awareness programs reference the recent creation date and the observed vendor flags, to improve user vigilance against newly‑emerged phishing infrastructures such as this one.