meriambet[.]net

This domain, meriambet.net, is flagged as a generic phishing threat targeting users through a fraudulent gaming portal. The page title, 'MERIAMHOKI : Situs Gaming Paling Hoki & Terpercaya Di Indonesia,' suggests an attempt to deceive Indonesian-speaking users into believing it is a legitimate gaming or betting platform. No specific brand impersonation or drainer kit signatures were identified in initial analysis, but the domain exhibits characteristics consistent with credential harvesting or financial fraud schemes commonly associated with phishing operations in the gaming sector. Analysis indicates the domain was registered through NameCheap, Inc. on April 02, 2026, and currently resolves to the IP address 172.67.129.230. Despite its recent creation, it has already been added to one security blocklist and appears in a single threat intelligence pulse on AlienVault OTX. The domain’s SSL certificate is issued by Google Trust Services, which may lend a false sense of legitimacy. VirusTotal reports 0 detections out of 95 engines, indicating no immediate antivirus flagging, though this does not preclude malicious intent. Gridinsoft assigns a trust score of 0/100, reinforcing its high-risk classification. The domain is currently offline, likely due to takedown efforts or voluntary suspension following detection by PhishDestroy. While no active compromise is observed, the infrastructure remains a residual risk until fully decommissioned. Users who accessed the site prior to its takedown should assume credential exposure and initiate password resets for any accounts linked to the domain. Organizations are advised to monitor network logs for connections to 172.67.129.230 and block the domain at the DNS or proxy level to prevent accidental access if it resurfaces. Continuous monitoring of related threat intelligence feeds is recommended due to the domain’s recent registration and phishing history.