meritking[.]info

On July 29, 2026, a technical assessment was performed on meritking.info, which is currently classified as an active generic phishing operation with an elevated risk rating. The domain was registered on September 08, 2021 through NameSilo, LLC, indicating a relatively early creation date for a site that only recently surfaced on threat feeds. Infrastructure analysis shows the domain is delegated to Cloudflare’s DNS service, using the nameservers neil.ns.cloudflare.com and malavika.ns.cloudflare.com.

This configuration provides DDoS mitigation and hides the underlying hosting provider, a common tactic for phishing operators seeking to evade takedown efforts. The domain is listed on at least one public security blocklist and has been explicitly blocked by the PhishDestroy mitigation platform, confirming that downstream security controls are already aware of its malicious intent. VirusTotal scans reveal that 15 of 91 security vendors flagged the domain, providing independent corroboration of its suspicious nature.

No additional public indicators such as SSL certificate details, HTTP response codes, or page titles have been disclosed, limiting the depth of observable evidence at this time. Defenders are advised to add meritking.info to network‑level blocklists, enforce URL filtering rules that incorporate the known blocklist entries, and monitor DNS queries for the associated Cloudflare nameservers for any anomalous resolution patterns. Continuous re‑evaluation should be performed as new telemetry becomes available, particularly if the domain begins to serve payloads or redirects that could expand its impact vector.