test[.]alpha[.]abqweather[.]com

test.alpha.abqweather.com is flagged by 13 out of 95 vendors on VirusTotal, indicating its malicious nature. The domain is currently offline, but it previously posed a significant threat with a platform risk score of 73/100. It was hosted on an IP managed by Ddos-guard LLC in Russia, which is often associated with dubious activities.

The page title, 'Valo.taxi - नकद और सवारी', suggests a potential targeting of Hindi-speaking users, although the exact nature of the scam remains unclear. The domain was registered with ENOM, INC., a common registrar for various types of domains, including those used for phishing attacks. The SSL certificate was issued by Let's Encrypt, a free certificate authority, which is frequently used by malicious actors to create a false sense of security.

Despite being taken down, the domain's prior activity highlights the ongoing risks of phishing domains that exploit the time gap between registration and detection. PhishDestroy's early detection capabilities identified this threat on May 3, 2026, well before many antivirus vendors could flag it. This case underscores the importance of proactive threat intelligence to mitigate risks from rapidly deployed phishing domains.