projetoaliancadobem[.]com

This domain, projetoaliancadobem.com, operates as a fake charity phishing site designed to impersonate legitimate social welfare and community support programs. Analysis indicates the site solicits donations under false pretenses, likely harvesting payment card details and personal information from victims who believe they are contributing to humanitarian causes. The fraudulent infrastructure mimics branding elements of established non-profit organizations, increasing the likelihood of successful deception among individuals seeking to support charitable initiatives. Infrastructure analysis reveals multiple technical indicators of malicious activity. The domain is flagged by 3 of 95 security vendors on VirusTotal, appears on one security blocklist, and was registered on April 28, 2026, through Fewmoretaps OU d/b/a Trustname.com. It previously resolved to the IP address 185.111.111.154, a host associated with other confirmed phishing campaigns. The domain's SSL certificate, issued by Let's Encrypt, provides a false sense of security while enabling encrypted exfiltration of stolen credentials and financial data. Users who visited projetoaliancadobem.com should take immediate remediation steps. Any entered credentials or payment information must be considered compromised and should be changed across all platforms where identical or similar details were used. Financial institutions should be notified to monitor for unauthorized transactions. Browser caches and stored form data should be cleared to remove any residual session tokens. Organizations are advised to block the domain and associated IP at the network perimeter, and to conduct retrospective log analysis for connections to 185.111.111.154 during the period of activity. Security awareness training should emphasize verification of charity legitimacy through official registration databases before processing donations.