mekasa[.]pro

Analysis indicates that mekasa.pro is an active phishing domain targeting users with a fake verification page. The domain was registered on July 5, 2026, through Global Domain Group LLC, and currently resolves to the IP address 104.21.23.171. Infrastructure analysis reveals the use of Cloudflare services, including Cloudflare Browser Insights and HTTP/3, alongside a SSL certificate issued by Google Trust Services. The site’s page title, 'Verification Required,' aligns with common phishing tactics designed to deceive users into submitting sensitive information. The domain is flagged by five security blocklists, including MalwareFilter, PhishDestroy, StevenBlack, OISD, and Hagezi, and appears in five threat intelligence pulses on AlienVault OTX. As of July 12, 2026, 27 out of 95 security vendors on VirusTotal detect the domain as malicious, reinforcing its classification as a high-risk threat. The Gridinsoft trust score of 1/100 further corroborates its malicious nature. No specific brand impersonation or phishing kit details are currently available in the intelligence data, but the combination of recent registration, Cloudflare obfuscation, and widespread blocklisting suggests a deliberate attempt to evade detection while conducting fraudulent activity. Defenders should treat this domain as hostile and implement blocking measures at the network and endpoint levels. Users encountering this domain should avoid interaction, as the exact content and data collection methods remain unconfirmed but are likely designed to harvest credentials or personal information.