m[.]merit-kingonline[.]com

This domain, m.merit-kingonline.com, is identified as a generic phishing threat targeting users through deceptive infrastructure. Analysis indicates no direct association with a specific brand or known drainer kit, but the domain exhibits characteristics consistent with credential harvesting or malicious redirect schemes. The site is currently active and employs Cloudflare services, which may obscure underlying malicious activity while presenting a legitimate-appearing front end. Infrastructure analysis reveals critical technical indicators: the domain resolves to IP address 172.67.167.169 and was registered on June 11, 2026, through Fewmoretaps OU d/b/a Trustname.com. Security vendor detections stand at 4 out of 95 on VirusTotal, with one confirmed blocklist entry. The SSL certificate is issued by Google Trust Services, and the site utilizes Cloudflare Browser Insights and HTTP/3 protocols. Despite these modern security measures, the domain is blocked by at least one anti-phishing system, and the page title 'Attention Required! | Cloudflare' suggests an attempt to mimic access control mechanisms to deceive users. Current status remains active, with elevated risk due to the combination of recent registration, low detection count, and Cloudflare obfuscation. Response actions should include immediate blocking of the domain and IP at network perimeters, along with monitoring for related subdomains or newly registered lookalike domains. Users encountering this domain are advised to avoid interaction, as the infrastructure may facilitate credential theft or malware distribution. The remaining risk is heightened by the domain's ability to bypass casual scrutiny through legitimate-seeming technical implementations, necessitating continued vigilance in security controls.