alabama[.]mobile-abe[.]vip

The domain alabama.mobile-abe.vip was registered on June 12, 2026 through Gname.com Pte. Ltd. and currently resolves to the IP address 172.67.197.232. VirusTotal analysis shows that ten of ninety‑one scanning engines have flagged the domain as malicious, indicating a non‑trivial detection rate across independent security products. The domain is listed on a single public blocklist and has been explicitly blocked by the PhishDestroy service, reinforcing the view that it is being used for malicious purposes.

Threat intelligence categorises the activity as generic phishing and assigns an elevated risk rating, with the operational status marked as active. No additional metadata such as page title, SSL certificate details, or HTTP response codes are available in the current dataset, leaving the exact content and targeted brand of the phishing page unverified. Consequently, defenders cannot confirm the specific credential‑capture technique or victim demographic beyond the generic phishing classification.

Given the observed infrastructure—recently created domain, use of a cloud‑based IP address, and detection by multiple vendors—security teams should treat alabama.mobile-abe.vip as a high‑confidence indicator of compromise. Recommended actions include adding the domain to internal blocklists, monitoring DNS queries for the IP 172.67.197.232, and enforcing URL filtering rules that deny traffic to the domain. Organizations should also review authentication logs for any login attempts that may have been directed to this host and consider user education on unsolicited login prompts, even though the exact impersonated brand has not yet been identified.