alphabetica[.]net

Analysis of alphabetica.net indicates active generic phishing infrastructure. The domain resolves to IP 192.185.25.253 and returns HTTP 406, suggesting a non‑standard response that may be used to evade casual browsing. MX records list a single mail exchanger (priority 0) at mail.alphabetica.net, confirming that the domain is configured for email receipt, a typical vector for credential‑stealing campaigns. Registration data shows the domain was created on 12 November 2018 through GoDaddy.com, LLC, and is served by nameservers ns149.websitewelcome.com and ns150.websitewelcome.com. Threat intelligence feeds corroborate the risk: AlienVault OTX has referenced the domain in six separate pulses, and VirusTotal reports six of ninety‑one security vendors flagging it as malicious. The risk level is classified as high and the status remains active. No publicly available page title or content has been captured, so the specific phishing lure or target brand cannot be confirmed at this time. Defenders should block traffic to alphabetica.net and its associated IP address, monitor for outbound mail to mail.alphabetica.net, and incorporate the domain into threat‑intel feeds to prevent credential harvesting. Continued observation is advised to detect any evolution of the payload or additional infrastructure components.