# PhishDestroy domain threat record: itei.org.mx Content language: English Canonical HTML report: https://phishdestroy.io/domain/itei.org.mx/ Machine-readable companion: https://phishdestroy.io/domain/itei.org.mx/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-09-04 19:12:49 UTC - Last availability or vendor check: 2026-10-22 10:14:09 UTC - Stored record updated: 2026-10-22 16:07:29 UTC - VirusTotal detections in the stored snapshot: 6/89 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 38.45.71.108 - Registrar in stored WHOIS data: AKKY ONLINE SOLUTIONS, S.A. DE C.V. - Registrar country in stored WHOIS data: Unknown - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2005-09-04 22:00:00 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a06dd4-b53f-74ef-b850-d31fed42f783/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/itei.org.mx - Certificate Transparency search: https://crt.sh/?q=%25.itei.org.mx - Web Archive lookup: https://web.archive.org/web/*/https://itei.org.mx/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview itei.org.mx is classified by PhishDestroy as an impersonation phishing page that presents itself as the Instituto de Transparencia, Información Pública y Protección de Datos Personales del Estado de Jalisco. Its likely audience is Mexican citizens, journalists and officials who file information requests or data-protection complaints with that institute. PhishDestroy first flagged it on 2026-09-04. As of 2026-10-19 the site was still online and serving content. How the scam works The page carries the full official name of the Jalisco transparency institute, so visitors see a government body they already expect to trust. Impersonation pages like this usually use that trust to collect logins, contact details, identity documents or the contents of public-records requests and complaints, which can later be used for fraud or targeted follow-up scams. The page title matches the institute's own name, and our impersonation classification rests on how the site is operated, not on a mismatched title. Evidence Six of 89 engines on VirusTotal flagged the domain in a check on 2026-09-14. The flagging vendors were alphaMountain.ai, Forcepoint ThreatSeeker, Gridinsoft, Seclookup, SOCRadar and VIPRE. That is a minority verdict, but it comes from several unrelated vendors. The domain also appears in seven AlienVault OTX threat pulses, which shows other researchers are tracking it. Among blocklists, only PhishDestroy currently lists it. Infrastructure The domain was registered on 2005-09-05 through AKKY ONLINE SOLUTIONS, S.A. DE C.V., the registrar behind Mexico's .mx zone. That is nearly 21 years before PhishDestroy flagged it, far older than the throwaway domains typical of phishing. The site is hosted on Cogent Communications in the United States rather than in Mexico. It uses a free Let's Encrypt certificate, so the padlock in the browser says nothing about who runs the site. What to do If you submitted a request, complaint, password or identity documents through this site, change that password wherever you have reused it. Treat any follow-up calls, emails or messages that cite your submission as possible fraud. If you shared a copy of your INE or CURP, watch for misuse and confirm your filing directly with the Jalisco transparency institute through a contact channel you found independently. Defenders should block the domain at DNS and mail gateways and add it to phishing filters. Report it to the registrar and the hosting network so they can review it. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a06dd4-b53f-74ef-b850-d31fed42f783/ VirusTotal report: https://www.virustotal.com/gui/domain/itei.org.mx Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=itei.org.mx Archived copy: https://web.archive.org/web/20260922090339/https://itei.org.mx/ Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-19 09:50:04 UTC ## Stored page captures - Primary capture: https://i.ibb.co/FqHPJk80/296f0fd44f18.png Captured: 2026-09-04 19:12:49 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a06dd4-b53f-74ef-b850-d31fed42f783.png Captured: 2026-09-04 19:12:49 UTC Source report: https://urlscan.io/result/01a06dd4-b53f-74ef-b850-d31fed42f783/ - URLQuery: https://screenshots.phishdestroy.io/uq/9d3208e7-a4a7-4bb5-a997-b4655aa70834.png Captured: 2026-09-04 19:23:45 UTC Source report: https://urlquery.net/report/9d3208e7-a4a7-4bb5-a997-b4655aa70834 SHA-256: 5c07e960cfca1b9fea1349a18ed2c98df68a29a069b239a0c1830137b1d5d6a9 - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/8942be4a-5db4-4633-b043-8755dfe000ec.png Captured: 2026-09-04 19:58:46 UTC Source report: https://radar.cloudflare.com/scan/8942be4a-5db4-4633-b043-8755dfe000ec SHA-256: c7556e5e339564e5cf17f56cf24ff71634d9593bea170255981b3c42da0c32b3 - URLScan · 2026-09-04: https://screenshots.phishdestroy.io/us/01a06dcf-5f25-75f6-bf90-5c2280c75d57.png Captured: 2026-09-04 19:05:11 UTC Source report: https://urlscan.io/result/01a06dcf-5f25-75f6-bf90-5c2280c75d57/ SHA-256: 787ddacf909b03c33588c7e0144f13bd63a21422d3570c808ebed2971a241e11 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-21T03:51:08Z", "uuid": "01a06dd4-b53f-74ef-b850-d31fed42f783", "scanned_at": "2026-09-04T19:11:00Z", "final_url": "https://www.itei.org.mx/v4/", "status": 200, "redirected": "parent-domain", "redirects": [ { "to": "https://itei.org.mx/", "from": "http://itei.org.mx/", "status": 307 }, { "to": "http://www.itei.org.mx/v4/", "from": "https://itei.org.mx/" }, { "to": "https://www.itei.org.mx/v4/", "from": "http://www.itei.org.mx/v4/", "status": 307 } ], "ip": "38.45.71.108", "ptr": "host.seltenmedia.com", "domains": [ "www.youtube.com", "fundingchoicesmessages.google.com", "pagead2.googlesyndication.com", "jnn-pa.googleapis.com", "googleads.g.doubleclick.net", "i.ytimg.com", "www.google.com", "static.doubleclick.net", "fonts.gstatic.com", "region1.google-analytics.com", "www.googletagmanager.com", "code.jquery.com", "itei.org.mx" ], "ips": [ "2001:4860:4847:400::", "2a00:1450:4001:c21::77", "142.251.110.113", "142.251.150.119", "142.251.152.4", "2a00:1450:4001:c0f::95", "142.251.110.156", "2a00:1450:4001:c0f::66", "142.250.154.94", "2001:4860:4802:32::36", "2001:4860:482b:400::", "142.251.13.156", "2a00:1450:4001:c13::61", "2a04:4e42:400::411", "38.45.71.108" ], "asns": [ "15169", "54113", "174" ], "countries": [ "US", "DE" ], "link_domains": [ "www.gobiernoabiertojalisco.org.mx", "wa.me", "www.iepcjalisco.org.mx", "gobiernoabiertojalisco.org.mx", "www.seajal.org", "www.plataformadetransparencia.org.mx", "bit.ly", "www.youtube.com", "www.inai.org.mx", "snt.org.mx", "www.tm.org.mx", "www.transparency.org", "www.hearcolors.com.mx" ], "social": [ "https://wa.me/3315445997", "https://www.youtube.com/user/iteijalisco" ], "doc_hash": "034645e4c3d803c937ccf1a51f13c392617eda56f0ed40dadb8790678efa40ce", "globals": [ "$", "jQuery", "gtag", "dataLayer", "adsbygoogle", "visitarNoticia", "popup", "google_js_reporting_queue", "google_srt", "BGtEY", "google_logging_queue", "ggeac", "google_persistent_state_async", "google_measure_js_timing", "google_tag_data", "google_reactive_ads_global_state", "google_ad_modifications", "google_sa_queue", "google_process_slots", "google_ama_state", "google_image_requests", "google_unique_id", "fqjyf", "google_rum_task_id_counter", "google_user_agent_client_hint", "google_tag_manager", "onYouTubeIframeAPIReady", "gaGlobal", "google_sa_impl", "googlefc", "adsbygoogle_ama_fc_has_run", "googFloatingToolbarManagerAsyncPositionUpdate", "default_ContributorServingResponseClientJs", "_F_toggles_default_ContributorServingResponseClientJs", "__googlefc", "__fcInvoked", "__fcexpdef", "MzNlMzQ3OGE4NWY5OWZhZWxvYWRlcl9qcw==", "MzNlMzQ3OGE4NWY5OWZhZWNhY2hlZF9qcw==", "__fcInternalApiManager" ], "cookies": [ "__Secure-YNID", "YSC", "__Secure-ROLLOUT_TOKEN", "VISITOR_INFO1_LIVE", "VISITOR_PRIVACY_METADATA", "_ga_4B36MRGM1X", "_ga", "FCCDCF" ], "tls": { "san": [ "itei.org.mx", "www.itei.org.mx" ], "cipher": "AES_256_GCM", "issuer": "YR2", "subject": "itei.org.mx", "protocol": "TLS 1.3", "valid_to": "2026-12-03T02:59:10Z", "valid_from": "2026-09-04T02:59:11Z" }, "domain_age_days": 3564, "apex_age_days": 3564, "tls_age_days": 0, "tls_valid_days": 89, "requests": 69, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": -75, "malicious": false }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "Apache/2", "content-type": "text/html; charset=UTF-8", "x-powered-by": "PHP/7.4.33" } }, "cf": { "v": 1, "fetched_at": "2026-10-21T04:01:35Z", "uuid": "8942be4a-5db4-4633-b043-8755dfe000ec", "scanned_at": "2026-09-04T19:58:46Z", "final_url": "https://www.itei.org.mx/v4/", "status": 200, "history": [ { "url": "https://itei.org.mx/", "status": 200 }, { "url": "http://www.itei.org.mx/v4/", "status": 307 }, { "url": "https://www.itei.org.mx/v4/", "status": 200 } ], "dom_hash": "3cdb6ea6e33f9b2d27df1d0e0196d875bbe63580e7e5bba5a7289cd5a57f029a", "doc_hash": "034645e4c3d803c937ccf1a51f13c392617eda56f0ed40dadb8790678efa40ce", "domain_risks": [ "Politics, Advocacy, and Government-Related", "Government & Politics" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "itei.org.mx", "type": "A", "value": "38.45.71.108" }, { "name": "www.itei.org.mx", "type": "A", "value": "38.45.71.108" } ], "dnssec_valid": false, "ip": "38.45.71.108", "whois": { "registrar": "AKKY ONLINE SOLUTIONS, S.A. DE C.V.", "created": "2005-09-05T00:00:00Z", "updated": "2026-08-28T00:00:00Z", "expires": "2031-09-04T00:00:00Z", "nameservers": [ "ns.seltenmedia.com", "ns2.seltenmedia.com" ] } } } ```