This analysis records the observable infrastructure for the domain mekey.io as of 28 July 2026. The domain resolves to the IPv4 address 188.114.97.3 and is delegated to the Cloudflare name servers etta.ns.cloudflare.com and kaiser.ns.cloudflare.com, indicating that the hosting service is provided through Cloudflare’s edge network. Registration information shows the domain was created on 20 September 2025 and is listed under the registrar GNAME.COM PTE. LTD.
No further registrant details are disclosed. The domain is currently flagged on a single security blocklist and is explicitly blocked by the PhishDestroy feed, confirming that at least one threat‑intelligence source classifies it as malicious. VirusTotal has processed the domain with scans from 91 antivirus and URL‑reputation engines; none of those engines have raised a detection as of the scan date, but the lack of a detection does not constitute evidence of safety and should not be interpreted as such. No public Safe Browsing, OTX, SSL certificate, HTTP status code, or page‑title information is available in the collected intelligence, leaving the content of the site unverified.
Consequently, the precise phishing payload or targeted brand cannot be determined from the current dataset. Defenders should treat mekey.io as a potentially hostile site. Recommended mitigations include adding the domain to DNS‑based block lists, monitoring network traffic for connections to 188.114.97.3, applying endpoint URL filtering, and periodically re‑scanning the domain with sandbox or reputation services to capture any future changes in behavior. Continuous observation of the registrar and block‑list status is advised to detect any escalation in activity.