meatgym[.]com

This report assesses meatgym.com, a domain created on February 03, 2025, and reported as a generic phishing threat on July 30, 2026. The domain remains active and is flagged as under investigation. VirusTotal scanning by 91 vendors yields no detections; however, this absence does not confirm safety. The domain appears on one security blocklist, specifically PhishDestroy, indicating it has been identified as a phishing site by at least one threat intelligence source. Infrastructure analysis shows the domain resolves to IP address 172.67.154.229, which is associated with Cloudflare, a content delivery network commonly used by both legitimate and malicious sites.

The domain is registered through NAMECHEAP INC, a registrar frequently used for low-cost domain registrations that can be leveraged for phishing campaigns. Nameservers are nicolas.ns.cloudflare.com and tess.ns.cloudflare.com, further confirming Cloudflare hosting. No information is available regarding Safe Browsing status, OTX, SSL certificate details, HTTP response status, trust scores, or page content. The exact nature of the phishing attack—whether credential harvesting, malware distribution, or another form—is not yet determined. Defenders should treat this domain as potentially malicious due to its presence on a phishing blocklist.

Recommended actions include blocking the domain and its associated IP at network perimeter devices, monitoring for any internal traffic to meatgym.com, and investigating any user interactions for signs of compromise. Further analysis of the site content via a sandboxed browser is advised to confirm the phishing vector and identify any targeted brands. Domain owners should be notified if internal access logs show connections. The lack of broader detection does not reduce risk; many phishing domains evade initial scanning by remaining dormant or using cloaking techniques.