alcon-share[.]com

Analysis of the domain alcon-share.com indicates an active brand impersonation campaign targeting Alcon, as evidenced by the page title 'Alcon-Share - Home' and the designated brand target in threat intelligence records. The domain was registered on July 5, 2024, through Tucows Domains Inc. and currently resolves to the IP address 74.50.79.163, hosted on AS19318 (Interserver, Inc) in the United States. Infrastructure analysis reveals the use of nameservers VDA7400A.TROUBLE-FREE.NET and VDA7400B.TROUBLE-FREE.NET, with an MX record configured for mail.alcon-share.com, suggesting potential email-based attack vectors. Security vendor detection rates show 11 of 95 engines flagging the domain as malicious, while it appears on one security blocklist and has been documented in a single AlienVault OTX threat intelligence pulse. The domain maintains an active SSL certificate issued by Let's Encrypt, and the site returns an HTTP 200 status, confirming operational status as of July 12, 2026. Gridinsoft assigns a trust score of 0/100, further indicating high-risk classification. Defenders should prioritize blocking the domain and its associated IP address, monitoring for related email activity, and reviewing logs for connections to 74.50.79.163. The exact phishing kit or payload remains unconfirmed, and further analysis of the site content is required to determine specific attack methodologies. Given the domain's recent registration and active status, continued monitoring for related infrastructure or campaign expansion is recommended.