m[.]meritttking-oyunlartek[.]com

The domain m.meritttking-oyunlartek.com is identified as a phishing infrastructure impersonating Meritking, a known online platform. Analysis indicates this is a fake login page designed to harvest user credentials under the guise of providing updated entry links. The domain is currently offline, but prior activity suggests it was actively targeting users seeking access to Meritking services. Infrastructure analysis reveals multiple technical indicators of compromise. The domain was flagged by 7 of 95 security vendors on VirusTotal, indicating a consensus among detection engines about its malicious nature. It was registered through Fewmoretaps OU d/b/a Trustname.com on June 11, 2026, an unusually future-dated registration that may signal domain generation algorithm (DGA) abuse or administrative error. The domain resolved to the IP address 188.114.96.3 and was hosted with an SSL certificate issued by Google Trust Services, a common tactic to lend false legitimacy. It appeared on one security blocklist and was blocked by PhishDestroy, further corroborating its classification as phishing infrastructure. The page title, 'Meritking - Meritking Giriş Linkleri | Güncel Adres Yayınlandı,' explicitly mimics legitimate Meritking branding to deceive users. Current status confirms the domain has been taken offline, reducing immediate risk to end users. However, the infrastructure and registration patterns suggest potential for reemergence. Organizations and individuals are advised to block the domain and associated IP at the network level, monitor for similar domain registrations using the same registrar or naming conventions, and educate users about recognizing fake login pages. Security teams should review logs for any prior connections to 188.114.96.3 or the domain to assess potential compromise. Given the elevated risk level and specific targeting of Meritking users, proactive measures are recommended to prevent future exploitation.