tr[.]merittkingbalgibi[.]icu

The domain tr.merittkingbalgibi.icu was registered on June 10, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and is currently resolved to Cloudflare name servers bart.ns.cloudflare.com and magdalena.ns.cloudflare.com. According to the latest VirusTotal scan, 13 out of 91 security vendors have flagged the domain as malicious, indicating a moderate level of consensus among detection engines. The domain is listed on a single external security blocklist and is actively blocked by the PhishDestroy filtering service, which corroborates its classification as a phishing‑related threat.

The risk rating assigned by the reporting platform is elevated, and the operational status is marked as active as of the report date, July 29, 2026. Publicly available intelligence does not include a page title, SSL certificate details, HTTP response codes, or any observed landing‑page content, so the specific lures or credential‑capture techniques employed by the site remain unknown. Likewise, no information about associated IP addresses, autonomous system numbers, or geographic hosting is provided, limiting the ability to trace the underlying infrastructure.

The lack of additional contextual data means that defenders must rely on the observable indicators—domain registration date, name‑server configuration, vendor detection count, and blocklist presence—to make mitigation decisions. Defenders are advised to add tr.merittkingbalgibi.icu to inbound and outbound filtering rules, update endpoint protection signatures to include the 13 vendor detections, and monitor DNS queries for the Cloudflare name servers associated with the domain. Continuous re‑evaluation of the domain should be performed, especially if new content analysis or additional blocklist entries emerge, to adjust the risk posture accordingly.