aciaa[.]org[.]br

The domain aciaa.org.br is currently classified as a high‑risk generic phishing site. Registration data shows the domain was created on 07 June 2004, which indicates a long‑standing registration but does not preclude recent malicious repurposing. DNS resolution points to the IPv4 address 178.128.135.121 and the authoritative name servers dns1.hosteg.net and dns2.hosteg.net, a hosting configuration commonly observed in abuse incidents. VirusTotal reports six of ninety‑five scanned security engines flagging the domain, providing independent confirmation of malicious activity. The domain is listed on a single external blocklist and has been explicitly blocked by the PhishDestroy feed, reinforcing the assessment of active phishing operations. The public status remains active as of 19 July 2026, and no additional intelligence such as target brand, phishing kit, or page content has been released. Defenders should immediately deny resolution to aciaa.org.br at network perimeter, add the associated IP address 178.128.135.121 to threat‑intel feeds, and monitor for any derivative domains that reuse the same name‑server pair. Continued observation of VirusTotal updates and blocklist expansions is advised to capture evolving detection coverage.