nemecaz[.]com

PhishDestroy identifies nemecaz.com as an active phishing domain impersonating Microsoft login portals, likely aimed at harvesting Office 365 credentials. The site resolves to IP 188.114.97.3 using a Let's Encrypt SSL certificate, creating a false sense of legitimacy. Analysis shows VirusTotal currently reports 13/95 security vendors detecting malicious activity, indicating this threat is either newly deployed or employing evasion tactics.

Technical indicators confirm the domain was registered through Global Domain Group LLC on April 23, 2026, making it an extremely recent threat (11 days old). The complete lack of detections suggests this phishing campaign may be operating under the radar or targeting specific geographic regions. Evidence shows no prior blocklist entries at the time of analysis, meaning traditional security filters may not yet recognize this domain as malicious.

Users who visited nemecaz.com should immediately change any Microsoft account passwords entered on the site and enable multi-factor authentication. Scan all devices for malware using updated antivirus tools and revoke any suspicious OAuth permissions granted to unknown applications. Report the domain to your IT security team or through Microsoft's phishing report portal. Avoid clicking links from unsolicited emails referencing Office 365 or Microsoft services, as this domain demonstrates how quickly credential-harvesting sites can emerge undetected.