alwadhi[.]com[.]alawadhiinternational[.]com

The domain alwadhi.com.alawadhiinternational.com was registered on November 12, 2025 through Global Domain Group LLC and remains active as of the July 12, 2026 report date. It resolves to the IPv4 address 198.251.83.106, which is announced by AS53667 (FranTech Solutions) and geolocated to the United States. The authoritative name servers are ns25.asurahosting.com, ns26.asurahosting.com, ns25.my-control-panel.com, and ns26.my-co, indicating the use of a shared hosting environment. The site presents a TLS certificate issued by Google Trust Services under the WR2 certificate authority, and the web server is identified as LiteSpeed with HTTP/3 support. An HTTP 302 redirect is observed, and the page title advertises "AL-AWADHI Investment Group LLC (AIG) | Global Funding, Financial Solutions & Business Investment," suggesting a financial or investment impersonation. Security telemetry shows a Gridinsoft trust score of 0 out of 100, and 9 of 95 VirusTotal scanners have flagged the domain, placing it on a single known blocklist and confirming its inclusion in the PhishDestroy blocklist. The threat is classified as generic_phishing with a high risk rating. While the page content has not been manually verified, the combination of a misleading investment‑focused title, low trust score, multiple detections, and active status indicates a credible phishing operation. Defenders should block the domain and its underlying IP at perimeter defenses, monitor related ASN traffic for similar patterns, and consider adding the domain to internal threat intelligence feeds. Ongoing observation is advised to detect any evolution of the campaign or the emergence of additional infrastructure components.