alenalorans[.]com

The domain alenalorans.com is currently flagged as an active Russian-language phishing site specializing in credential harvesting under the guise of online passport services. Analysis indicates this infrastructure is specifically designed to impersonate official government document portals, as evidenced by the page title 'ПАСПОРТ ОНЛАЙН' (Passport Online in Russian). The domain remains operational and continues to host phishing content targeting users seeking digital passport services. Infrastructure analysis reveals the domain was registered through URL SOLUTIONS INC. on September 16, 2022, and resolves to the IP address 185.215.4.10, which is geolocated in Russia and associated with AS57724 (DDOS-GUARD LTD). Security vendor detection shows 2 of 95 engines on VirusTotal currently flag this domain as malicious. The domain appears on one security blocklist and uses a Let's Encrypt SSL certificate (R12) to create an appearance of legitimacy. The hosting provider's DDoS protection services suggest the infrastructure is designed to withstand takedown attempts. Current status confirms the phishing site remains active and accessible. Organizations and individuals are advised to implement immediate blocking of this domain and its associated IP address (185.215.4.10) at the network perimeter. Security teams should monitor for similar domains registered through the same registrar (URL SOLUTIONS INC.) with Russian-language content targeting government services. End users should be educated about the risks of entering sensitive personal information on unverified online document portals, particularly those using non-governmental domains for official services.