merbacas[.]com

The domain merbacas.com is associated with a brand impersonation threat targeting the online crypto casino and gambling sector. This site was designed to mimic legitimate crypto casino platforms, misleading users into believing they were engaging with a trustworthy service. The lack of an SSL certificate further highlights its potential to capture sensitive user data without secure encryption, increasing the risk of data theft or fraud.

Technical analysis of merbacas.com indicates several red flags. The domain was registered through Dominet (HK) Limited and was created on October 21, 2025. It resolves to IP address 104.21.13.113, located in the US under AS13335 Cloudflare, Inc. Although it is currently offline, it has been flagged by PhishDestroy and appears on one security blocklist, with VirusTotal showing detections from 11 out of 95 security vendors. These indicators suggest that the domain was part of a coordinated effort to impersonate legitimate brands in the crypto and gambling industries.

If you visited merbacas.com, it is crucial to take immediate steps to secure your information. Change passwords for any accounts that may have been compromised and monitor your financial statements for unusual activity. Consider using security software to scan your devices for malware. Additionally, report the incident to relevant authorities to aid in tracking and preventing further fraudulent activities. Remaining vigilant and proactive in securing your digital footprint can mitigate potential risks from such impersonation threats.