alphaverix[.]com

On July 24, 2026 the domain alphaverix.com was observed serving HTTP content with status code 200. The site presented the page title “AlphaVerix 3.9 — a professional investment hub with top‑tier data safety”, but no TLS certificate was offered, indicating transmission over plain HTTP. Google Safe Browsing classifies the host as a social‑engineering threat, and the domain appears on one external blocklist and is actively blocked by PhishDestroy. Registration details show the domain was created on 21 February 2026 through Dynadot LLC, and the authoritative nameservers are ns1.dyna-ns.net and ns2.dyna-ns.net. DNS resolution points to 172.67.214.91, an address owned by Cloudflare, Inc. (AS13335) located in the United States.

VirusTotal analysis recorded three detections out of ninety‑three scanners, confirming that multiple security vendors have flagged the site. The listed scam type is brand impersonation, suggesting the page attempts to mimic a legitimate investment service, although the specific victim brand is not disclosed in the available data. The current operational status is offline, which may be the result of takedown or automated sink‑hole. Evidence confirms the presence of a malicious infrastructure but leaves several open questions.

The lack of TLS prevents assessment of potential credential capture over encrypted channels, and the absence of additional context such as captured payloads or phishing lures means the exact attack vector remains unclear. Defenders should continue to block the domain at perimeter filters, update URL filtering lists with the observed host, and monitor for any resurgence of activity from the associated IP address or its Cloudflare range. Given the recent creation date, organizations should be wary of newly registered domains with similar characteristics, especially those hosted on shared CDN providers and lacking TLS.