conference[.]nemoofficeclub[.]co[.]uk

The domain conference.nemoofficeclub.co.uk is flagged as a high‑risk generic phishing site. Registration data shows the domain was created on 16 September 2021 through 123‑Reg Limited (tag 123‑REG). DNS resolution points to IP 185.199.220.71, which belongs to AS12488 Krystal Hosting Ltd in the United Kingdom and is served by the name servers ns59.domaincontrol.com and ns60.domaincontrol.com. The host presents a valid TLS certificate issued by ZeroSSL / ZeroSSL RSA Domain Secure Site CA, indicating that HTTPS connections are encrypted, but the certificate does not mitigate the underlying malicious activity. An HTTP request returns a 200 status code while the page title is reported as “404 Not Found”, suggesting that the server delivers a custom error page rather than a standard 404 response.

This discrepancy is typical of phishing infrastructure that aims to hide the true content from automated scanners. The domain is currently listed on the PhishDestroy blocklist and appears on one additional security blocklist, reinforcing the assessment of malicious intent. Reputation services show a Gridinsoft trust score of 0 / 100, the lowest possible rating. VirusTotal analysis records seven detections out of ninety‑three scanned engines, confirming that multiple antivirus and URL‑reputation products have identified the domain as malicious. The combination of low trust score, blocklist inclusion, and multiple vendor detections substantiates the high‑risk classification.

Defenders should block network traffic to 185.199.220.71 and add conference.nemoofficeclub.co.uk to URL filtering policies. Because the domain uses a legitimate‑looking TLS certificate, reliance on certificate inspection alone is insufficient; active monitoring of DNS resolutions and HTTP responses is recommended.