merzinirsei[.]com

The domain merzinirsei.com is identified as a brand impersonation threat, specifically targeting MetaMask. This domain is currently offline, mitigating immediate risk, but previously posed an elevated threat level due to its deceptive practices.

Technical analysis shows that merzinirsei.com was flagged by 15 out of 95 security vendors on VirusTotal, indicating a significant recognition of its malicious nature. The domain was registered through Atak Domain and was created on October 21, 2025. It resolved to the IP address 188.114.97.3, located in the US under the ASN 13335, operated by Cloudflare, Inc. Furthermore, it has been added to two security blocklists, namely PhishDestroy and PhishingDB, which further underscores its threat level.

Currently, the domain is offline, reducing the immediate threat. However, it is recommended that users remain vigilant for similar threats, especially those impersonating trusted brands like MetaMask. Security teams should ensure that network defenses are updated to block access to known malicious IPs and domains, and that users are educated about recognizing phishing attempts. Continuous monitoring of newly registered domains that could potentially impersonate well-known brands is also advised.