anchorage[.]com

Analysis of the domain www.anchorage.com indicates it is actively flagged as a phishing site targeting institutional cryptocurrency services. The domain, registered on March 5, 2026, through Squarespace Domains II LLC, resolves to IP 198.202.211.1, hosted on AS209242 (Cloudflare London, LLC). The page title, 'Crypto Bank for Institutions | Anchorage Digital,' suggests an attempt to impersonate a legitimate institutional crypto banking platform. Infrastructure review reveals the use of Google Cloud nameservers (ns-cloud-e1.googledomains.com, ns-cloud-e2.googledomains.com, ns-cloud-e3.googledomains.com) and an SSL certificate issued by Google Trust Services (WE1). Detected technologies include jQuery, jsDelivr, Hotjar, and LinkedIn Insight Tag, which may facilitate tracking or malicious payload delivery. The domain appears on one security blocklist and is currently blocked by PhishDestroy. No detections were reported by the 94 vendors that scanned the domain on VirusTotal, though this does not confirm safety. Gridinsoft assigned a trust score of 0/100, further indicating high risk. Defenders should treat this domain as malicious, block resolution at the DNS level, and monitor for connections to the associated IP (198.202.211.1). Additional investigation is required to determine the full scope of the phishing campaign, including payload delivery mechanisms and targeted entities.