# mecmgt.com Site Offline countdown page | PhishDestroy Content language: English Canonical HTML report: https://phishdestroy.io/domain/mecmgt.com/ Machine-readable companion: https://phishdestroy.io/domain/mecmgt.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-31 15:23:26 UTC - Last availability or vendor check: 2026-10-31 15:23:26 UTC - Stored record updated: 2026-10-31 17:30:24 UTC - VirusTotal detections in the stored snapshot: 11/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: checked_clean ## Stored infrastructure - Observed IP address: 156.38.203.35 - Registrar in stored WHOIS data: TUCOWS.COM, CO. - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2024-02-09 09:29:45 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a1928d-ab18-7649-b2e4-8ad2e9a00ab0/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/mecmgt.com - Certificate Transparency search: https://crt.sh/?q=%25.mecmgt.com - Web Archive lookup: https://web.archive.org/web/*/https://mecmgt.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Public report package PhishDestroy records the captured mecmgt.com page showing a Site Offline heading and a countdown timer at zero. The captured mecmgt.com page shows a large "Site Offline" heading on a pink gradient background, with a countdown timer beneath it. All four timer fields read zero for days, hours, minutes and seconds, so the countdown has already elapsed. Four small social media icons sit near the bottom of the page, and no other visible content or interaction appears beyond this static countdown display. The stored VirusTotal domain result reports 11 detections out of 92 engines. VIPRE reported "phishing"; G-Data reported "phishing". Package revision: 73029f95b0f1072aec22dfc995f54da2b7070aab2bb7165a8b052010ff81cac8 Text generated (not scan time): 2026-10-31 16:54:45 Reviewed evidence snapshot: {"domain":"mecmgt.com","screenshot_available":true,"page_title":"Site Offline","virustotal":{"detections":11,"engines":92,"malicious":11,"suspicious":0,"retrieved_date":"2026-10-31","analysis_date":"2026-10-23","flagging_vendors":["VIPRE","G-Data","Lionic","Sophos","CyRadar","Webroot","Gridinsoft","BitDefender","Chong Lua Dao","alphaMountain.ai","Forcepoint ThreatSeeker"],"vendor_labels":{"VIPRE":"phishing","G-Data":"phishing","Lionic":"phishing","Sophos":"phishing","CyRadar":"phishing","Webroot":"malicious","Gridinsoft":"phishing","BitDefender":"phishing","Chong Lua Dao":"malicious","alphaMountain.ai":"phishing","Forcepoint ThreatSeeker":"phishing"},"scope":"domain"},"capture_context":{"relationship":"screenshot associated with this domain record"},"virustotal_public_summary":"The stored VirusTotal domain result reports 11 detections out of 92 engines. VIPRE reported \"phishing\"; G-Data reported \"phishing\".","page_paragraph_target_characters":517} Source facts (timestamps as stored): {"record_id":1721457,"first_recorded_at":"2026-10-31 16:23:26","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":11,"denominator":92,"malicious":11,"suspicious":0,"vendors":{"VIPRE":"phishing","G-Data":"phishing","Lionic":"phishing","Sophos":"phishing","CyRadar":"phishing","Webroot":"malicious","Gridinsoft":"phishing","BitDefender":"phishing","Chong Lua Dao":"malicious","alphaMountain.ai":"phishing","Forcepoint ThreatSeeker":"phishing"},"observed_at":"2026-10-23T11:22:53Z","checked_at":"2026-10-31 16:53:41","fetched_at":"2026-10-31T15:53:40Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":11,"denominator":92,"malicious":null,"suspicious":null,"vendors":["alphaMountain.ai","BitDefender","Chong Lua Dao","CyRadar","Forcepoint ThreatSeeker","G-Data","Gridinsoft","Lionic","Sophos","VIPRE","Webroot"],"observed_at":"2026-10-23 11:22:53","checked_at":"2026-10-31 16:53:41","fetched_at":"2026-10-31 15:53:41","time_basis":"as stored; legacy timezone not established"}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"checked_clean","verdict":0,"checked_at":"2026-10-31 16:53:42"},"spamhaus":{"source":"Spamhaus","verdict":null,"checked_at":"2026-10-31 16:30:12"},"availability":{"source":"stored HTTP observation","state":"alive","observed_at":"2026-10-31 16:23:26"}} ## Stored page captures - Primary capture: https://i.ibb.co/5WDwxd3Y/10e59721b6af.png Captured: 2026-10-31 15:23:26 UTC - URLScan capture 1: https://screenshots.phishdestroy.io/01a1928d-ab18-7649-b2e4-8ad2e9a00ab0.png Captured: 2026-10-31 15:23:26 UTC Source report: https://urlscan.io/result/01a1928d-ab18-7649-b2e4-8ad2e9a00ab0/ - URLScan · 2026-02-03: https://screenshots.phishdestroy.io/us/019c2419-880d-7369-a23b-0803c7a300d0.png Captured: 2026-02-03 15:23:06 UTC Source report: https://urlscan.io/result/019c2419-880d-7369-a23b-0803c7a300d0/ SHA-256: 347e7f511948dc79374461857a9790f75cd4793224168f7d4e89ddd1cc4a5226 - URLScan · 2026-02-03: https://screenshots.phishdestroy.io/us/019c2472-9609-76bf-9315-00c1ac97675d.png Captured: 2026-02-03 17:00:35 UTC Source report: https://urlscan.io/result/019c2472-9609-76bf-9315-00c1ac97675d/ SHA-256: c7288bb80d0b7e42a1aba5bd4e08d4628670ad461246ec8e2479837ab8179401 - URLScan · 2026-02-04: https://screenshots.phishdestroy.io/us/019c262a-c78c-7072-8fab-7a5d327e85f8.png Captured: 2026-02-04 01:01:11 UTC Source report: https://urlscan.io/result/019c262a-c78c-7072-8fab-7a5d327e85f8/ SHA-256: c7288bb80d0b7e42a1aba5bd4e08d4628670ad461246ec8e2479837ab8179401 - URLScan · 2026-02-14: https://screenshots.phishdestroy.io/us/019c5dda-8e20-7484-a0d7-fac8816a01d0.png Captured: 2026-02-14 20:32:16 UTC Source report: https://urlscan.io/result/019c5dda-8e20-7484-a0d7-fac8816a01d0/ SHA-256: 347e7f511948dc79374461857a9790f75cd4793224168f7d4e89ddd1cc4a5226 - URLScan · 2026-10-31: https://screenshots.phishdestroy.io/us/01a1928b-4f0a-727a-8367-9cdeba466037.png Captured: 2026-10-31 15:19:33 UTC Source report: https://urlscan.io/result/01a1928b-4f0a-727a-8367-9cdeba466037/ SHA-256: 52c8f2391530a54d749882c8bca0ce16137b8581b1238135513d3d6c579045c6 - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/4cd92048-6aa5-4b0f-a8db-b55490c2f096.png Captured: 2026-10-31 15:53:45 UTC Source report: https://radar.cloudflare.com/scan/4cd92048-6aa5-4b0f-a8db-b55490c2f096 SHA-256: 521db7f84c0bd9d241e58903b03385f016f0185123a0d6d23a6cf13731b69059 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-31T15:35:02Z", "uuid": "01a1928d-ab18-7649-b2e4-8ad2e9a00ab0", "scanned_at": "2026-10-31T15:22:12Z", "final_url": "http://mecmgt.com/", "status": 200, "redirects": [ { "to": "https://mecmgt.com/", "from": "http://mecmgt.com/", "status": 307 }, { "to": "http://mecmgt.com/", "from": "https://mecmgt.com/", "status": 307 } ], "ip": "156.38.203.35", "ptr": "dedi1569.jnb1.host-h.net", "ips": [ "156.38.203.35" ], "asns": [ "37153" ], "countries": [ "ZA" ], "doc_hash": "18de4d4a7c5868928a5ea3b6dde97db20bc7542de0953c4b4b44967262762e8b", "script_hashes": [ "1e7f83052e1e3442c4397ced9555033cd1d3f08444d85960683bcf91c8433cdb", "bf5756b42791ad1d693196b5b2e57e93a387d45dee7ba02322a001c451b8df05", "d04575c71a54bb95061b0c14f1d4bfc21b88fa47ebb62f3cb2704aa03ba5be6a", "2249399b2268c260d0698542503d16afebc80e437c846239f12196744ebbd40f", "21d2a245a74e384716acae13113be9947fa0855995db8753a502d834532c151f", "579d9d9773858e863e7d802489f84b27b7f557b99900a3c6090a16ce8431ac45" ], "globals": [ "jQuery", "WOW", "Retina", "RetinaImagePath", "RetinaImage", "scroll_to", "now", "countTo" ], "domain_age_days": 995, "apex_age_days": 995, "requests": 19, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 72, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "Apache", "content-type": "text/html; charset=UTF-8" } }, "cf": { "v": 1, "fetched_at": "2026-10-31T16:26:40Z", "uuid": "4cd92048-6aa5-4b0f-a8db-b55490c2f096", "scanned_at": "2026-10-31T15:53:45Z", "final_url": "https://mecmgt.com/", "status": 200, "history": [ { "url": "https://mecmgt.com/", "status": 200 } ], "dom_hash": "778e6a22561601f718cbb7414cce195e0bfe2af476c90eb433cba56a6d66b728", "doc_hash": "00c5c919d4e8f84efce5b6cbd3d1b3913fec164c273a85d32d8c2d57a5846209", "domain_risks": [ "Parked & For Sale Domains", "Security Risks" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "mecmgt.com", "type": "A", "value": "156.38.203.35" } ], "dnssec_valid": false, "ip": "127.0.1.10", "whois": { "registrar": "Tucows Domains Inc.", "created": "2024-02-09T10:29:45Z", "updated": "2025-08-28T05:43:59Z", "expires": "2028-02-09T10:29:45Z", "nameservers": [ "ns1.dns-h.com", "ns1.host-h.net", "ns2.dns-h.com", "ns2.host-h.net" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-31T15:53:40Z", "analysis_at": "2026-10-23T11:22:53Z", "stats": { "timeout": 0, "harmless": 48, "malicious": 11, "suspicious": 0, "undetected": 33 }, "detections": { "VIPRE": "phishing", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "CyRadar": "phishing", "Webroot": "malicious", "Gridinsoft": "phishing", "BitDefender": "phishing", "Chong Lua Dao": "malicious", "alphaMountain.ai": "phishing", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "categories": { "Sophos": "phishing and fraud", "Webroot": "Phishing and Other Frauds", "alphaMountain.ai": "Phishing (alphaMountain.ai)", "Forcepoint ThreatSeeker": "phishing and other frauds" }, "registrar": "TUCOWS.COM, CO.", "created": "2024-02-09T10:29:45Z", "expires": "2028-02-09T10:29:45Z", "updated": "2025-08-28T05:43:59Z", "first_seen": "2024-02-11T08:02:37Z", "dns": [ { "ttl": 7200, "type": "SOA", "rname": "postmaster.mecmgt.com", "value": "ns1.host-h.net" }, { "ttl": 7200, "type": "TXT", "value": "v=spf1 mx a include:spf.host-h.net ?all" }, { "ttl": 7200, "type": "NS", "value": "ns1.dns-h.com" }, { "ttl": 7200, "type": "MX", "value": "mail.mecmgt.com", "priority": 10 }, { "ttl": 7200, "type": "A", "value": "156.38.203.35" }, { "ttl": 7200, "type": "NS", "value": "ns1.host-h.net" }, { "ttl": 7200, "type": "NS", "value": "ns2.host-h.net" }, { "ttl": 7200, "type": "NS", "value": "ns2.dns-h.com" } ], "dns_at": "2026-10-23T11:23:14Z", "jarm": "2ad2ad0002ad2ad00042d42d000000d0979a504319f0fa83c2f00f881b6a1d", "cert": { "san": [ "imap.mecmgt.com", "mail.mecmgt.com", "mecmgt.com", "smtp.mecmgt.com", "www.mecmgt.com" ], "issuer": "Let's Encrypt / YR1", "serial": "684f90ba15af725b1e39c37094f1f81c169", "sha256": "c69e5451cdb51ff47313512b41106322d0a0578da109689a3a86e055e57913eb", "subject": "mecmgt.com", "valid_to": "2026-12-09T13:02:43Z", "valid_from": "2026-09-10T13:02:44Z" }, "whois": { "registrar": "TUCOWS.COM, CO.", "registrar_iana_id": "69", "registrar_url": "http://tucowsdomains.com", "created": "2024-02-09T10:29:45Z", "updated": "2025-08-28T05:43:58Z", "expires": "2028-02-09T10:29:45Z", "status": [ "clientTransferProhibited", "clientUpdateProhibited" ], "nameservers": [ "ns1.dns-h.com", "ns1.host-h.net", "ns2.dns-h.com", "ns2.host-h.net" ], "dnssec": "unsigned" }, "rdap": { "status": [ "client transfer prohibited", "client update prohibited" ], "events": { "expiration": "2028-02-09T10:29:45Z", "last changed": "2025-08-28T05:43:59Z", "registration": "2024-02-09T10:29:45Z", "last update of RDAP database": "2026-10-23T11:22:50Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-31T15:54:50Z", "mail_config": { "mx": [ "mail.mecmgt.com" ], "spf": "v=spf1 mx a include:spf.host-h.net ?all", "spf_lookups": 6 }, "caa_records": { "domain": "mecmgt.com" }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "archives": { "last": "2026-10-31T15:24:17Z", "first": "2004-03-22T19:18:46Z", "changes": 6, "days_archived": 16, "scans_per_day": 0, "avg_page_bytes": 1232 }, "social_tags": { "title": "Site Offline" }, "trackers": { "requests": 17 }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 200, "timings": { "dns": 2602, "tls": 188, "wait": 449, "connect": 191, "download": 0 }, "response_ms": 3430 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 21, 22, 25, 80, 110, 143, 443, 587, 993, 995, 3306 ] }, "carbon": { "bytes": 5703, "co2_grams": 0.0002, "cleaner_than": 84 }, "dns_server": { "ns": [ { "ip": "129.232.248.41", "host": "ns2.dns-h.com" }, { "ip": "129.232.248.40", "host": "ns2.host-h.net" }, { "ip": "129.232.248.30", "host": "ns1.host-h.net" }, { "ip": "129.232.248.31", "host": "ns1.dns-h.com" } ], "zone": "mecmgt.com" }, "location": { "ip": "156.38.203.35", "asn": "37153", "org": "Xneelo (Pty) Ltd", "city": "Johannesburg", "country": "ZA" }, "ssl": { "issuer": "Let's Encrypt / YR1", "subject": "mecmgt.com" }, "dns": { "A": [ "156.38.203.35" ], "MX": [ "{\"exchange\": \"mail.mecmgt.com\", \"priority\": 10}" ], "NS": [ "ns2.dns-h.com", "ns2.host-h.net", "ns1.host-h.net", "ns1.dns-h.com" ], "SOA": "{\"nsname\": \"ns1.host-h.net\", \"hostmaster\": \"postmaster.mecmgt.com\", \"serial\": 2024020901, \"refresh\": 86400, \"retry\": 1800, \"expire\": 3600000, \"minttl\": 86400}", "TXT": [ "v=spf1 mx a include:spf.host-h.net ?all" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "156.38.203.35", "family": 4 }, "redirects": { "chain": [ "https://mecmgt.com" ] }, "subdomains": { "count": 11, "subdomains": [ "autodiscover.mecmgt.com", "cpanel.mecmgt.com", "cpcalendars.mecmgt.com", "cpcontacts.mecmgt.com", "imap.mecmgt.com", "mail.mecmgt.com", "pop.mecmgt.com", "smtp.mecmgt.com", "webdisk.mecmgt.com", "webmail.mecmgt.com", "www.mecmgt.com" ] }, "linked_pages": { "internal_count": 1 }, "whois": { "registrar": "Tucows Domains Inc.", "created": "2024-02-09T10:29:45Z", "updated": "2025-08-28T05:43:59Z", "expires": "2028-02-09T10:29:45Z", "status": [ "clientTransferProhibited https://icann.org/epp", "clientUpdateProhibited https://icann.org/epp" ], "nameservers": [ "ns1.dns-h.com", "ns1.host-h.net", "ns2.dns-h.com", "ns2.host-h.net" ] }, "headers": { "headers": { "server": "Apache", "content-type": "text/html; charset=UTF-8" } } } } ```