meritking8003[.]com

meritking8003.com was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on June 10, 2026. Within weeks the domain appeared on a security blocklist and was subsequently added to the PhishDestroy feed, indicating that the site is being used for malicious phishing activity. VirusTotal scans show that six of ninety‑one AV engines flagged the domain, confirming that at least a subset of security products consider it suspicious.

The threat classification supplied is generic phishing and the risk rating is elevated; the domain remains active as of the report date, July 29, 2026. No additional infrastructure details such as hosting IP, autonomous system number, SSL certificate information, HTTP response codes, or page title have been publicly disclosed, limiting the depth of technical attribution. Because the domain is already listed on a blocklist and has been detected by multiple vendors, defenders should proactively deny traffic to meritking8003.com at network perimeters, add the domain to DNS‑based blacklists, and ensure that email security gateways enforce URL filtering for this host.

Continuous monitoring of threat intelligence feeds for any new indicators—such as expanded hosting footprints or observed payloads—will be necessary to adapt defenses if the campaign evolves. Organizations that rely on the affected brand’s communications should educate users about unexpected links and encourage verification through official channels. The current evidence suggests a focused phishing operation, but further reconnaissance is required to fully map the supporting infrastructure.