alphanote[.]org

This domain, alphanote.org, is flagged as an active credential harvesting phishing site targeting users through deceptive login interfaces. Analysis indicates the domain is operational and designed to harvest sensitive authentication details, though no specific brand impersonation has been confirmed at this time. The infrastructure remains accessible and poses a direct threat to users encountering it through phishing campaigns. Infrastructure analysis reveals the domain was registered on June 21, 2026, through Fewmoretaps OU d/b/a Trustname.com. It resolves to the IP address 38.97.40.99 and is currently flagged by 3 of 95 security vendors on VirusTotal. The domain appears on one security blocklist and holds a Gridinsoft trust score of 0/100, indicating a complete lack of reputation. The SSL certificate is issued by Let's Encrypt, a common tactic among phishing operators to mimic legitimacy. The page title, 'Alpha Note - Alpha Note,' provides no clear indication of a targeted brand but aligns with generic phishing templates. The domain remains active and continues to resolve, posing an ongoing risk to users. Organizations are advised to block the domain and its associated IP address at the network perimeter. Endpoint protection systems should be updated to include alphanote.org in their phishing detection rules. Users who may have interacted with the domain should be instructed to reset credentials and monitor accounts for unauthorized activity. Security teams are encouraged to review logs for connections to 38.97.40.99 and investigate any related incidents.