projetoaliancadobem[.]org

The domain projetoaliancadobem.org has been identified as a credential harvesting phishing site targeting users through deceptive login interfaces. Analysis indicates this domain is designed to impersonate legitimate services, likely financial or corporate platforms, to harvest sensitive authentication credentials. As of the latest assessment, the domain is currently offline, though it remains a documented threat in active phishing campaign tracking. Infrastructure analysis reveals that projetoaliancadobem.org was registered on April 24, 2026, through Fewmoretaps OU d/b/a Trustname.com, a registrar frequently associated with high-risk domains. The domain resolves to the IP address 2.59.216.227, which has been linked to multiple phishing and malicious hosting activities. Detection metrics indicate that 3 of 95 security vendors on VirusTotal have flagged this domain, while Gridinsoft assigns it a trust score of 0/100. The domain appears on one security blocklist and has been documented in a single threat intelligence pulse on AlienVault OTX. The SSL certificate is issued by Let’s Encrypt, a common choice among threat actors to lend superficial legitimacy to phishing pages. Current status confirms that projetoaliancadobem.org has been taken offline, though residual risk persists due to the domain’s registration remaining active. Organizations and users are advised to implement DNS-level blocking for the domain and its associated IP address, 2.59.216.227, to prevent potential re-emergence. Security teams should monitor for related domains registered through the same registrar, particularly those created in close temporal proximity. End-users should be educated on recognizing phishing indicators, such as suspicious domain names, mismatched SSL certificates, and unsolicited authentication requests. Proactive threat hunting is recommended to identify any residual artifacts or compromised credentials linked to this campaign.