annfurraymassage[.]com

The domain annfurraymassage.com is a confirmed phishing site engaged in brand impersonation targeting Google. It presented itself as a legitimate service but was designed to deceive users into entering credentials or other sensitive information under false pretenses. No crypto drainer kit was detected. The site is currently taken offline, but its prior activity poses an elevated risk to users who may have interacted with it.

Technical analysis of annfurraymassage.com reveals limited detection, with 1 of 95 VirusTotal security vendors flagging the domain, specifically Gridinsoft, which assigned a trust score of 0/100. The domain was registered through Cosmotown, Inc. on June 18, 2025, and resolved to the IP address 163.61.188.2, hosted under AS153568 NEW DHAKA HARDWARE in the US. It appeared on 1 security blocklist, PhishDestroy, and had no SSL certificate. The observed page title was 'Ann Furray Massage', and the nameservers were dns1.lytehosting.com, dns2.lytehosting.com, dns3.lytehosting.com, and dns4.lytehosting.com.

Users who visited annfurraymassage.com should immediately change any passwords entered on the site, especially if they reused credentials across other platforms. Enable two-factor authentication (2FA) on all accounts as an additional security measure. Monitor financial and online accounts for unauthorized activity, and report the phishing domain to Google’s Safe Browsing team via their reporting tool. If the site was accessed on a work device, inform the organization’s IT or security team to assess potential exposure.