merrimackcu[.]com

This domain is actively impersonating Merrimack County Credit Union to harvest online banking credentials and personal financial information. Analysis indicates it presents a fraudulent login portal under the page title 'Home | MerrimackCU', mimicking legitimate credit union authentication pages to deceive victims into submitting sensitive account details. Infrastructure analysis reveals multiple high-risk indicators. The domain was registered on March 07, 2026, through NameSilo, LLC, an unusually recent creation date for a financial institution. It resolves to 194.36.191.196, hosted on AS60117 (Host Sailor Ltd) in the Netherlands, a network frequently associated with phishing infrastructure. Security vendors have flagged this domain, with 2 out of 95 engines detecting malicious activity on VirusTotal. Additionally, it appears on one security blocklist and uses a Let's Encrypt SSL certificate (R12), which while providing encryption, is commonly exploited by threat actors to lend false legitimacy to phishing sites. Users who have visited merrimackcu.com should immediately cease all interaction with the site. Those who entered credentials should assume their account details have been compromised and take immediate action: contact their financial institution to report potential fraud, change all passwords associated with financial accounts, and enable multi-factor authentication where available. Monitor account statements closely for unauthorized transactions and consider placing a fraud alert with credit bureaus. The domain remains active as of this analysis, and continued access poses significant risk of financial theft or identity compromise.