mekontlogic[.]live

The domain mekontlogic.live was registered on May 15, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and is currently active. It serves a page titled “Mekont Logic | Official Platform for AI Assisted Trading” and returns HTTP 200. The site is classified as high‑risk generic phishing and appears on at least one security blocklist.

Infrastructure analysis shows the domain resolves to IP 188.114.96.3, an address owned by CloudFlare, Inc. with a reported location of Canada. The domain uses CloudFlare’s DNS service (adi.ns.cloudflare.com and leland.ns.cloudflare.com) and presents a valid Let’s Encrypt certificate issued by the E7 authority. The SSL configuration is typical for fast‑flux or abuse‑hosting services that rely on shared CDNs.

Threat intelligence signals reinforce the malicious assessment. VirusTotal reports three of ninety‑five scanners flagging the domain, and AlienVault OTX references the domain in a single pulse. Gridinsoft assigns a trust score of 0 / 100, and PhishDestroy lists the domain as blocked. These independent indicators converge on a pattern consistent with credential‑stealing operations that masquerade as a legitimate AI‑assisted trading platform.

Defenders should add mekontlogic.live to deny‑list rules across perimeter firewalls, web proxies, and endpoint protection suites. Continuous monitoring of DNS queries for the associated CloudFlare nameservers can help detect further replication of the infrastructure. Because the site leverages a reputable CDN, any takedown request to the CDN provider is unlikely to succeed; mitigation should therefore focus on blocking at the network layer and educating users about the fake “Mekont Logic” branding.