# moed-torlian.com — SUSPICIOUS

> Site moed-torlian.com is a live credential-harvesting scam flagged by 1/95 VirusTotal engines and Google Safe Browsing for social-engineering attacks.

## Summary
PhishDestroy identifies moed-torlian.com as an active credential-harvesting domain posing an elevated phishing risk. The site mimics a legitimate login portal to trick visitors into surrendering usernames and passwords, which are then harvested by attackers for account takeovers and further exploitation.

This domain was flagged by Google Safe Browsing under the SOCIAL_ENGINEERING category and detected by only 1 out of 95 VirusTotal security engines on the day of analysis. It was registered on November 26, 2025, through the NETIM registrar and resolved to IP address 91.236.116.172 at the time of investigation. The site also holds a valid Let's Encrypt SSL certificate, which may create a false sense of security for visitors.

If you visited moed-torlian.com, change any passwords you may have entered immediately and enable multi-factor authentication on vulnerable accounts. Run a full antivirus scan on your device and monitor financial or personal accounts for signs of unauthorized activity. Report the domain to your security team or browser vendor to help block future access. Avoid clicking any links or entering credentials on this site in the future.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-11-26 21:01:08
- Registrar: NETIM
- IP: 91.236.116.172

## Detection Status
- VirusTotal: 1 vendors flagged
- Google Safe Browsing: FLAGGED
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/43b703d9-05c4-41e1-a6fe-aef548084689
- PhishDestroy: https://phishdestroy.io/domain/moed-torlian.com/
- LLM endpoint: https://phishdestroy.io/domain/moed-torlian.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/moed-torlian.com/
Last updated: 2026-03-22