institutoaliancadobem[.]org

The domain institutoaliancadobem.org has been identified as a credential theft site, designed to trick users into entering sensitive login information under false pretenses. This threat does not appear to impersonate a specific well-known brand but instead uses a generic pretext to harvest credentials. No cryptocurrency drainer kit was detected in association with this domain.

Technical analysis reveals that the domain was flagged by 1 out of 95 security vendors on VirusTotal, indicating low but notable detection. The domain was registered through Fewmoretaps OU d/b/a Trustname.com and was created on April 28, 2026, making it relatively new at the time of analysis. It resolved to IP address 2.59.216.227, with no SSL certificate present, which is a common red flag for phishing sites. The domain appears on 1 security blocklist and was also found in 1 threat intelligence pulse on AlienVault OTX. Google Safe Browsing (GSB) status was not provided but the domain is currently offline.

As of the latest check, the domain has been taken offline, which likely resulted from reports or automated takedown actions. While the immediate threat is neutralized, users who may have previously visited the site or entered credentials should change their passwords immediately and enable two-factor authentication where possible. The risk remains that similar domains could be registered by the same threat actor, so continued vigilance is advised. PhishDestroy recommends avoiding any interaction with the domain and reporting any related suspicious activity to relevant authorities. The unique seed for this assessment is 5ed382.