mecagrun[.]com

PhishDestroy has identified mecagrun.com as a phishing site that poses a high risk to visitors. The domain impersonates a legitimate energy and environment company, likely to steal login credentials or personal information from unsuspecting users. Anyone who visits the site may be tricked into entering sensitive data, which could lead to identity theft or account compromise. The site is now offline, but the threat remains for users who may have interacted with it.

The evidence against mecagrun.com is overwhelming. VirusTotal flagged it with 16 out of 95 security vendors marking it as malicious. The domain was registered on February 21, 2026 through Network Solutions, LLC, and appeared on at least one security blocklist. Google Safe Browsing specifically flagged it for phishing, and AlienVault OTX found it in two threat intelligence pulses. The SSL certificate was issued by Let's Encrypt, often abused by phishers, and the site resolved to IP 192.185.109.242 before being taken offline. With such clear indicators, there is no doubt this was a phishing operation.

If you visited mecagrun.com and entered any personal information, take immediate action. Change the passwords for any accounts that may be compromised, enable two-factor authentication, and monitor your financial accounts for suspicious activity. Consider contacting your bank or credit card company if financial details were shared. Run a full security scan on your device to check for malware. Stay vigilant against follow-up scams, as your data may be sold or used in future attacks. PhishDestroy recommends always verifying the legitimacy of a website before entering sensitive data.