merkl-cycle[.]com

merkl-cycle.com is currently classified as a generic phishing site with an elevated risk rating. The domain was registered on June 11 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar frequently associated with short‑lived malicious infrastructure. DNS resolution points to the IPv4 address 188.114.97.3; no additional hosting details are disclosed in the available intelligence. VirusTotal reports that 5 of 91 security vendors have flagged the domain, indicating that a minority of scanners have identified malicious behavior. The domain is listed on three independent security blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL, reinforcing the consensus that it should be treated as hostile.

Publicly available analyses such as Safe Browsing, OTX, SSL/TLS inspection, HTTP response codes, trust‑score metrics, and page‑title extraction have not been published for this host, so the visual or functional characteristics of the landing page remain unknown. Consequently, the exact phishing vector, targeted brand, or credential‑harvesting method cannot be confirmed at this time.

Defenders should prioritize immediate containment: add merkl-cycle.com to network‑level deny lists, enforce DNS sink‑hole redirection, and ensure endpoint protection solutions incorporate the domain in their malicious‑URL feeds. Continuous monitoring of traffic to 188.114.97.3 is advised, as the address may serve additional payloads or serve as a pivot point for related campaigns. Analysts should re‑evaluate the domain as soon as additional telemetry—such as HTTP headers, certificate data, or page content—becomes available, to refine detection rules and assess any escalation in threat activity.