mera[.]io

Analysis indicates that mera.io was registered on April 22 2026 and continues to resolve to IP address 76.223.54.146 located in the United States on AWS Global Accelerator infrastructure. The domain returns an HTTP 200 status and remains reachable as of the current report date. Its Gridinsoft trust score stands at 0 out of 100 while the name appears in a single AlienVault OTX pulse and on one additional security blocklist. The certificate was issued by GoDaddy.com Inc under the Go Daddy Secure Certificate Authority G2 chain.

The threat classification is listed as generic phishing with an overall risk level marked under investigation. The domain is blocked by PhishDestroy and maintains active status without evident changes since registration. No specific brand or target organization is identified in the available records which leaves the precise impersonation vector undetermined at this stage. VirusTotal reports 0 detections out of 95 engines though this single metric is not treated as conclusive evidence of either safety or malice.

Defenders should treat mera.io as a live indicator requiring blocking at DNS and proxy layers. Network monitoring for connections to 76.223.54.146 combined with certificate pinning checks against the known GoDaddy issuer can aid in detection. Continued observation is warranted given the domain age and the limited yet consistent external signals recorded across threat feeds. Updates to blocklists and internal watchlists are recommended while further attribution details remain unavailable.