systematic-alpha[.]net

Analysis indicates that the domain systematic-alpha.net was registered on February 5 2025 through NameSilo, LLC and is currently resolving to the IPv4 address 91.235.142.237. The authoritative name servers ns21.v-sys.org and ns22.v-sys.org are in use, suggesting the hosting provider operates its own DNS infrastructure. VirusTotal reports that two of ninety‑one scanned security vendors have flagged the domain, confirming that at least a minority of scanners have identified malicious behavior. The domain appears on a single public blocklist and is also listed by the PhishDestroy mitigation service, reinforcing the view that it is being actively used for abusive purposes.

The threat classification supplied is “generic phishing,” and the status is marked as active, indicating that the infrastructure is presently operational. No publicly available SSL certificate details, HTTP response codes, or page‑title information have been disclosed, leaving the exact content of the hosted site unverified. Consequently, the specific phishing lure, target brand, or credential‑capture mechanism cannot be confirmed at this time.

Defenders should treat systematic-alpha.net as a high‑risk indicator and incorporate the domain and its associated IP address into outbound and inbound filtering rules. Continuous monitoring of the name‑server records and periodic re‑scanning with multi‑engine services are recommended to detect any changes in detection rates or additional blocklist listings. Organizations that employ domain‑based allow‑lists should explicitly deny traffic to this domain, and threat‑intel sharing platforms should be updated with the observed indicators to improve community‑wide detection.