anonymixer[.]biz

Analysis of anonymixer.biz shows a domain that was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on August 24, 2025. The domain resolves to the IPv6 address 2a06:98c1:3121::3, which is announced by AS13335 Cloudflare, Inc., placing the hosting infrastructure within the United States. Current network status indicates the site has been taken offline. The page title retrieved from earlier scans reads “Anonymixer - Anonymous Bitcoin Mixer,” a content theme unrelated to the claimed impersonation of Google. The domain is explicitly tagged as impersonating Google and is associated with a tech‑support scam classification.

Threat intelligence from AlienVault OTX references the domain in four separate pulses, and five independent blocklists—including PhishDestroy, ScamSniffer, Polkadot, Enkrypt, and Codeesura—have listed it. VirusTotal records show that eleven of ninety‑three security vendors flagged the domain, reinforcing the malicious assessment. Additional reputation data from Gridinsoft assigns a trust score of 23 out of 100, indicating a low confidence rating. The SSL certificate is identified as “WE1,” suggesting a weak or improperly configured certificate.

The combination of brand impersonation, mismatched page title, low trust score, multiple vendor detections, and blocklist listings supports a high‑risk classification. Uncertainty remains regarding the exact content served while the site was active, as no live HTTP response or page capture is available. Defenders should continue to block anonymixer.biz at network and endpoint layers, monitor DNS queries for resurgence, and include the domain in threat‑intel feeds. Ongoing verification of the hosting provider and any potential re‑registration attempts is recommended to maintain protection against future abuse.