aligma[.]sbs

This domain, aligma.sbs, was registered through Dynadot Inc on July 23, 2026 and remains active as of the report date. The authoritative nameservers are gracie.ns.cloudflare.com and harlan.ns.cloudflare.com, indicating that the domain is hosted behind Cloudflare's DNS service. DNS resolution points to the IPv4 address 188.114.97.3. The page title observed during a limited fetch is “Atendimento”, which does not reveal a specific target brand but confirms that a web service is reachable.

The domain is listed on one public security blocklist and has been flagged by the PhishDestroy feed, suggesting that threat‑intel communities have identified it as malicious. A VirusTotal scan involving 91 antivirus and URL‑reputation engines returned no positive detections; however, the absence of a detection does not guarantee safety, especially given the recent creation date and the presence on a blocklist. No additional intelligence such as Safe Browsing status, OTX references, SSL certificate details, or HTTP response codes is available in the current dataset.

Consequently, the primary indicators are the blocklist entry, the PhishDestroy flag, and the recent registration. Defenders should add aligma.sbs to inbound and outbound filtering rules, monitor DNS queries for this domain, and consider it high‑risk for credential‑harvesting attempts. Continuous re‑evaluation is recommended as further telemetry becomes available, including potential detection by additional vendors or changes in blocklist status.