mcom-nl[.]com

PhishDestroy identifies mcom-nl.com as an active brand impersonation domain targeting Dutch business professionals by mimicking a legitimate business magazine. The site’s page title, 'Mcom Nl - Le magazine Bedrijf (NL),' closely mirrors reputable Dutch publications to deceive visitors into entering login credentials or payment details. Users arriving via phishing links or malvertising may be prompted to submit sensitive information under the false pretense of accessing exclusive business content. This domain was flagged during routine threat monitoring after resolving to IP address 188.114.96.3. Security analysis reveals it was registered on March 14, 2025, via TurnCommerce, Inc. (DBA NameBright.com), and currently holds a valid SSL certificate issued by Google Trust Services. Notably, VirusTotal shows 0 detections out of 95 scanners, indicating it remains under the radar of most automated defenses. The absence of blocklist entries suggests this campaign is newly active and rapidly evolving. If you accessed mcom-nl.com or entered any credentials, immediately change passwords used on that site and enable multi-factor authentication on all related accounts. Monitor financial and email accounts for unusual activity. Report the domain to your security team or block it at the network level using the IP 188.114.96.3. Avoid future visits by verifying legitimate URLs through official sources only.