Security Scan Report: merit1689.com

Site favicon
Submitted: Feb 4, 2026, 5:19:43 PMCompleted: Feb 4, 2026, 5:21:58 PMpubliccompleted
Loading additional data...

Summary

This website contacted 8 IPs in 1 country across 9 domains to perform 157 HTTP transactions. The main domain is merit1689.com and was registered NaN years ago.

Submitted URL: https://merit1689.com/promotions

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

New domain with hidden login form; classified as a confirmed phishing scam.

Risk Factors
Domain age < 7 days
Credential harvesting form (email + password)
Hidden password field
Brand impersonation on a newly registered domain
Domain age information unavailable

Details

Page Title

MeritKing 1681 | Türkiye’nin En Büyük Online Casino &amp; Slot Sitesi

Scan Type

public

Language

🇹🇷

Turkish

(80% confidence)

Category

corporate business

(73%)

Domain Information

You're looking at domain 'merit1689.com' on the commercial generic top-level domain (.com) without a subdomain. The registrable portion 'merit1689' spans 9 characters containing 2 vowels alongside 3 consonants, notching 4 digits. It segments into two words: merit, 1689. Expect 4.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://merit1689.com/promotions

Page Load Overview

42.63s
Total Load Time
165
HTTP Requests
10
Domains
16.3 MB
Total Size

Language Analysis

Primary Language

🇹🇷Turkish
Code: tr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:tr
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:tr
Text Length:3,871 chars
Detector Agreement:80%

Website Classification

Primary Category

corporate business73% confidence
Type: spa
Method: ml+structural

All Detected Categories

corporate business
73%
gambling betting
69%
technology software
44%
social_media
25%
corporate
25%

Detected Features

Login Form
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
25151.101.1.229United States
AS54113Fastly, Inc.
20104.18.95.41United States
AS13335Cloudflare, Inc.
20104.17.25.14United States
AS13335Cloudflare, Inc.
2092.113.23.102United States
20142.251.141.104United StatesUnknown
20151.101.2.137United StatesUnknown
20172.66.161.212United States
AS13335Cloudflare, Inc.
20142.251.141.106United StatesUnknown
1658--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T124742B16B4982209A037C75096E09F899264E117D5062BEDB9AFD620CFC7DC73F7329E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:5QX+zVRIQCgthI2kWvb3uSf9GfXO2rYcq3sriggg04jy2hZ+qCD1J5IP0h:5QX+zVRIQCgbI2kWvb3uSf9GfXO2hq8S

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:339480:IFwAF2EQoHSIGSo4ahaAtlSBdBUqmAuKqAHEYEZIMIMwQWLAgjgkCq1hAkEwMBAbCQRJgFQmCoCwIA7CASDiEDJVMJUkHk39

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0001011919010003
Perceptual Hash:aa5a755589552357
Difference Hash:01050d15150d0003
Wavelet Hash:0303131b1b0b0303
Color Hash:#5390ac

Other Hashes

Crop Resistant:01050d15150d0003

Scan History

Scan history not available

Unable to load historical scan data