alpen-official[.]com

The domain alpen-official.com was registered on February 21, 2026 and is currently taken offline. Technical analysis shows that it resolves to the IPv4 address 194.48.203.184, which belongs to an Irish network (AS205282) operated by Tilda Publishing Ltd. The authoritative name servers are ns1.tildadns.com and ns2.tildadns.com, and no TLS certificate was observed on the host, indicating that HTTPS was not configured at the time of capture. The site presented the page title "Official website - Alpen Advisors," suggesting an attempt to masquerade as a legitimate advisory service. The registrar listed for the domain is REGRU-RU, a Russian registration entity.

Threat intelligence indicates the domain appears on three security blocklists and has been explicitly blocked by PhishDestroy, MetaMask, and SEAL, reinforcing the view that it is being used for malicious purposes. VirusTotal analysis recorded three positive detections out of ninety‑three scanned engines, providing additional corroboration of suspicious activity. Reputation services assign a Scamadviser trust score of 47 out of 100 and a Gridinsoft score of 0 out of 100, reflecting a low confidence in the site's legitimacy. The observed indicators collectively point to a brand‑impersonation campaign targeting the "Alpen Advisors" brand or a broader set of brands labeled as "across" in the intelligence feed.

Uncertainty remains around the exact payload or credential‑harvesting mechanisms, as no page content beyond the title has been disclosed. Defenders should continue to block the domain at network perimeter and endpoint layers, monitor DNS queries for the associated IP address and name servers, and incorporate the observed blocklist entries into threat‑intel feeds. Ongoing surveillance of the registrar REGRU-RU and the hosting provider may reveal additional related infrastructure, and any future re‑activation of the domain should be treated with heightened scrutiny.