alifuae[.]com

Analysis of alifuae.com indicates a high-risk brand impersonation domain targeting Facebook users. The domain, registered on October 27, 2014, through GoDaddy.com, LLC, currently resolves to IP 162.241.123.76 (AS46606, United States) and is hosted on nameservers ns69.domaincontrol.com and ns70.domaincontrol.com. Infrastructure reveals a WordPress site running on Apache HTTP Server with PHP, MySQL, Bootstrap, Chart.js, Modernizr, and Lightbox technologies. The page title displays 'ALIF IT Solution LLC,' but the scam type is classified as social media impersonation, specifically targeting Facebook. The domain returns an HTTP 302 redirect status, suggesting it may be actively redirecting visitors to malicious endpoints. It is flagged by one security blocklist and appears in two AlienVault OTX threat intelligence pulses. Fifteen of 93 security vendors on VirusTotal detect this domain as malicious. MX records point to alifuae-com.mail.protection.outlook.com with priority 0, and the SSL certificate is issued by Let's Encrypt (R13). Defenders should note that while the domain has been active since 2014, its current behavior aligns with brand impersonation tactics. The combination of a long-standing domain, social media scam classification, and active detections warrants immediate blocking. No legitimate business purpose has been confirmed, and the site’s content has not been fully analyzed. Network-level protections should be enforced, and any associated credentials or sessions originating from this domain should be invalidated.