anufohunmedicals[.]org

Analysis of anufohunmedicals.org shows a newly registered domain (creation date 2026-05-03) hosted by Dynadot Inc. The domain resolves to the IPv4 address 163.61.188.9 and is currently active. DNS resolution uses four authoritative nameservers (dns1.lytehosting.com, dns2.lytehosting.com, dns3.lytehosting.com, dns4.lytehosting.com). The domain has been submitted to VirusTotal where 91 scanning engines evaluated the host; none reported a detection at the time of the scan. The same domain is listed on a single public blocklist, PhishDestroy, indicating that at least one anti‑phishing service has classified it as malicious.

No additional evidence such as SSL certificate details, HTTP response codes, page title, or Safe Browsing verdicts is available in the current intelligence set. The presence of a recent registration, active hosting, and inclusion on a phishing‑specific blocklist suggests the domain is being used for credential‑harvesting or similar phishing campaigns, even though automated scanners have not flagged it. The lack of detections from VirusTotal may reflect the limited behavior captured during the scan rather than an absence of malicious payloads. Consequently, the true threat vector remains uncertain; the site could host a credential‑stealing form, a redirect to a credential‑collection service, or serve as a staging point for further attacks.

Defenders should block or monitor traffic to 163.61.188.9 and to the domain itself at the DNS level. Email gateways should be configured to flag URLs containing anufohunmedicals.org, and security teams should add the domain to internal blocklists. Continuous monitoring of the IP address for changes in reputation, as well as periodic rescans on VirusTotal or similar platforms, is recommended. Because the domain is newly created, any legitimate business correspondence originating from it should be treated as suspicious until verified.