mezoorg[.]lat

This domain, mezoorg.lat, is confirmed as a credential harvesting phishing site targeting users through fraudulent login portals. The site mimics legitimate authentication pages to trick visitors into submitting sensitive credentials, including usernames, passwords, and potentially multi-factor authentication codes. Such stolen data is typically used for unauthorized account access, financial fraud, or further targeted phishing attacks against contacts or organizations. Analysis indicates the domain was registered on April 02, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with high-risk domains. At the time of detection, 5 out of 95 security vendors on VirusTotal flagged the domain as malicious, with additional listings on one security blocklist and one threat intelligence pulse from AlienVault OTX. The domain has since been taken offline, but residual risk remains for users who interacted with it prior to deactivation. If you visited mezoorg.lat or entered any credentials on the site, immediate action is required. Disconnect the affected device from the network to prevent potential lateral movement or data exfiltration. Reset all passwords entered on the site, prioritizing accounts with financial or administrative access. Enable multi-factor authentication on all critical accounts, using app-based or hardware tokens rather than SMS. Monitor accounts for unauthorized transactions or configuration changes, and review connected devices or sessions for suspicious activity. If corporate credentials were exposed, notify internal security teams to initiate incident response protocols.