alcoar[.]com

This domain is flagged for generic phishing activities, with an elevated risk level due to its deceptive nature. The domain, alcoar.com, was identified as a phishing site employing tactics to mimic legitimate websites, specifically indicated by its use of the page title 'Alcoa -- Home'. Such characteristics are commonly used in phishing schemes to mislead users into divulging sensitive information.

The domain alcoar.com was registered through NameCheap, Inc. and resolves to the IP address 195.35.38.96, which is hosted in the United States under AS47583 by Hostinger International Limited. The domain was created on February 21, 2026, and has been detected by 18 out of 95 security vendors on VirusTotal, highlighting a significant detection rate. Furthermore, it has been blocked by security service PhishDestroy and appears on one security blocklist. The SSL certificate in use was issued by Let's Encrypt, which, while a legitimate certificate authority, is sometimes misused by malicious actors to lend credibility to fraudulent sites.

To mitigate risks associated with this phishing domain, it is crucial to ensure that users and organizations are aware of the threat it poses. Implementing email filtering to block communications from this domain can help prevent phishing attacks. Regular updates to security blocklists and user education about recognizing phishing attempts are also recommended. Additionally, monitoring network traffic for connections to the IP address 195.35.38.96 can help identify potential breaches or phishing attempts. Ensuring robust security protocols and user training are in place will greatly reduce the risk of falling victim to such phishing campaigns.