xn--mertkng2011-j79ec[.]com

PhishDestroy identifies an active phishing campaign at the domain xn--mertkng2011-j79ec.com, which presents itself as MeritKing, a supposedly large online casino platform targeting Turkish and global users. This website is designed to trick visitors into believing it is a legitimate gambling platform offering premium slot and casino games. However, all indicators confirm it is a fraudulent scheme aimed at stealing personal and financial information from unsuspecting victims. The site mimics a professional online casino to gain trust, but users who register or deposit funds are likely to lose money or have their credentials compromised. The page title itself—MeritKing Dünyanın ve Türkiye’nin En Büyük Online Casino Platformu ! | Premium Slot ve Casino Oyunları—attests to the threat actor’s intent to deceive Turkish-speaking users with promises of high-quality, premium gaming experiences while concealing malicious intent behind a polished facade.

This domain was flagged by PhishDestroy after confirming it had zero detections on VirusTotal as of the latest scan, despite being active and operational. Domain registration details reveal it was created on April 19, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar often associated with newly registered domains of questionable intent. The domain resolves to IP address 5.252.32.34 and uses a valid SSL certificate issued by Let’s Encrypt, which is commonly exploited by threat actors to appear legitimate. Given its recent creation and zero detections on VirusTotal, this domain represents a high-risk, under-the-radar phishing threat targeting Turkish online casino enthusiasts.

If you visited xn--mertkng2011-j79ec.com, do not enter any personal information, login credentials, or payment details. Immediately clear your browser cache and cookies related to the site, and consider changing passwords if you entered any—especially if reused across other services. Disconnect from the internet if you interacted with the page, scan your device with updated antivirus software, and file a report with your local cybercrime unit or through national reporting platforms like the Turkish Cybersecurity Incident Response Team (USOM) if you are in Turkey. Avoid clicking any links from this domain in the future, and warn others who may be searching for online casinos. The domain is still active as of investigation time, so exercise caution if you encounter it again—it is not a safe or legitimate platform.