meapox[.]com

PhishDestroy identifies meapox.com as an active generic phishing domain posing as a COVID-19 vaccine portal to harvest personal data. The domain resolves to IP 188.114.96.3 and was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on April 19, 2026. Preliminary analysis shows no detections on VirusTotal (9/95 engines) and no presence on major blocklists, though its SSL certificate from Let's Encrypt suggests an attempt to appear legitimate. Given its fresh registration and lack of historical reputation, this domain represents an emerging threat with high potential for user deception. This domain was flagged as part of ongoing surveillance for vaccine-related phishing campaigns targeting public health anxiety. Key technical indicators include its recent creation date (April 19, 2026), hosting on a cloud IP (188.114.96.3), and use of a widely trusted SSL provider to evade browser warnings. While no antivirus engines currently detect it, the absence of historical data and the domain's generic structure raise immediate concerns about its intent. The registrar (NICENIC INTERNATIONAL GROUP CO., LIMITED) has been associated with disposable domains in prior phishing investigations, further warranting scrutiny. Users should avoid interacting with meapox.com or any vaccine-related domains created in 2026 without verification. If exposed, reset passwords used on the site, enable multi-factor authentication on related accounts, and monitor for credential stuffing attempts. Report the domain to your antivirus vendor or PhishDestroy’s database using the seed 8a745 to aid collective threat intelligence. Organizations should flag the IP range 188.114.96.0/24 in network defenses to prevent further exploitation of this campaign.