secure[.]alpencoin[.]net

Analysis of secure.alpencoin.net as of August 04, 2026 indicates that the domain is actively used for credential phishing. The site is listed on the PhishDestroy blocklist, and it appears on a single security blocklist overall. VirusTotal records show that the domain was submitted to the service and examined by 91 distinct scanning engines; none of the engines reported a detection at the time of the scan. While the absence of detections does not constitute a safety guarantee, it demonstrates that the payload or hosting infrastructure has not yet been flagged by the participating vendors.

No additional infrastructure details such as registrar information, hosting IP address, autonomous system number, or SSL certificate metadata have been publicly disclosed. Likewise, Safe Browsing status, Open Threat Exchange (OTX) entries, and page‑title data are not presently available. The lack of these data points limits the ability to correlate the domain with broader malicious campaigns, but the existing blocklist entry and the phishing classification provide sufficient operational context for defensive actions. Defenders should add secure.alpencoin.net to local deny lists and ensure that web filtering solutions block any HTTP or HTTPS requests to the domain.

Network intrusion detection signatures that flag outbound connections to the domain should be deployed. Because the domain has been observed by PhishDestroy, integration with threat‑intelligence feeds that include this blocklist will help automate enforcement. Continuous monitoring of VirusTotal, passive DNS, and future blocklist publications is recommended to capture any changes in detection status or additional infrastructure disclosures. Until further evidence emerges, the domain should be treated as a confirmed credential‑phishing resource and mitigated accordingly.