anupamaivf[.]com

On 23 July 2026, anupamaivf.com was identified as a high‑risk brand‑impersonation campaign targeting Facebook. The domain was registered on 21 February 2026 through Hostinger operations, UAB and is serviced by the generic parking nameservers ns1.dns‑parking.com and ns2.dns‑parking.com. DNS resolution points to the IP address 89.117.157.55, which belongs to AS47583 Hostinger International Limited and is geolocated to India. No TLS certificate is presented, confirming the site is served over plain HTTP.

The single page currently reachable presents the title “Home – Anupama IVF”, which does not contain any visible Facebook branding; the specific content of the page has not been publicly disclosed. Detection infrastructure shows the domain appearing on three security blocklists, specifically PhishDestroy, MetaMask and SEAL. VirusTotal analysis recorded 13 detections out of 93 scanned vendors, indicating a moderate level of consensus among antivirus and URL‑filtering engines. The AlienVault Open Threat Exchange references the domain in six distinct threat‑intel pulses, further evidencing its use in malicious campaigns.

Gridinsoft assigns a trust score of 0 / 100, reinforcing the classification as malicious. The campaign’s current operational status is offline, limiting immediate exposure, but the infrastructure—namely the use of a reputable hosting provider and publicly listed IP—suggests the actors can reactivate the site quickly. Defenders should continue to monitor the associated IP address and host‑provider for any re‑deployment, enforce blocklist entries for the three named blocklists, and consider adding the domain to internal URL‑filtering policies. Additional investigation of the HTTP response headers, potential redirects, and any payloads retrieved before takedown would be advisable to enrich attribution and to detect possible reuse of the same infrastructure in future Facebook‑related impersonation attempts.