# secure-mercu-chat.ovh — SUSPICIOUS

> secure-mercu-chat.ovh is linked to credential phishing and currently under investigation. Learn the risks and protect your data from potential scams.

## Summary
PhishDestroy identifies secure-mercu-chat.ovh as a domain associated with credential phishing activity. Although the domain has not yet been flagged by any security vendors, it is currently under investigation due to suspicious characteristics and its use in attempts to steal user credentials.

The domain secure-mercu-chat.ovh was registered on March 4, 2026, through OVH and resolves to IP address 213.186.33.5. Despite a clean VirusTotal scan with zero detections, the domain's recent creation date combined with its hosting infrastructure raises concerns typical of phishing campaigns. The .ovh TLD is often used in fraudulent operations due to low registration costs and anonymity.

At this time, the campaign is active but lacks widespread detection, warranting user caution. PhishDestroy recommends avoiding interaction with this domain, refraining from entering any personal information, and maintaining updated security solutions. Continuous monitoring is advised to detect potential escalations in threat activity or new indicators of compromise.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 0)
- Page title: Site en construction

## Domain Intelligence
- Registered: 2026-03-06 11:07:01
- Registrar: OVH
- Country: FR
- IP: 213.186.33.5
- IP Country: FR
- IP City: Roubaix
- IP Org: AS16276 OVH SAS
- Nameservers: ["dns14.ovh.net", "ns14.ovh.net"]
- SSL Issuer: Let's Encrypt / E8

## Detection Status
- VirusTotal: 3 vendors flagged
  Vendors: ["G-Data", "Gridinsoft", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cc295-58f6-70ac-b21d-9ebb5bbe1b95.png
- Cloudflare Radar: https://radar.cloudflare.com/domains/secure-mercu-chat.ovh
- Wayback Machine: https://web.archive.org/web/https://secure-mercu-chat.ovh
- PhishDestroy: https://phishdestroy.io/domain/secure-mercu-chat.ovh/
- LLM endpoint: https://phishdestroy.io/domain/secure-mercu-chat.ovh/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/secure-mercu-chat.ovh/
Last updated: 2026-03-19