gisnz[.]com

PhishDestroy identifies gisnz.com as a live Microsoft 365 credential-harvesting page designed to steal corporate login details. The spoofed site mimics the legitimate Microsoft 365 sign-in portal, tricking users into entering their email address and password. Once captured, attackers can bypass multi-factor authentication and access sensitive mailboxes, share files, and impersonate the victim, potentially leading to business e-mail compromise and data exfiltration.

Evidence shows 0 detections on VirusTotal (0/95 engines), a Google Trust Services SSL certificate, and registration through Gname.com Pte. Ltd. Domain creation date is June 30, 2025, resolving to IP 188.114.96.3. Despite the absence of detections, the page actively mimics the Microsoft 365 login interface and has not yet appeared on major blocklists, suggesting a newly launched campaign with evolving tactics.

If you visited gisnz.com or entered credentials, change your Microsoft 365 password immediately, revoke the session in your Microsoft 365 security dashboard, and report the incident to your IT team. Scan your device with updated antivirus software and consider enabling Microsoft Defender for Office 365 or equivalent anti-phishing controls. Do not reuse the compromised password on any other account.