cnangelly[.]net

The domain cnangelly.net was taken offline as of the report date, July 24, 2026, after being blocked by the PhishDestroy mitigation service. Infrastructure analysis shows the domain resolved to the IP address 188.114.96.3, which is hosted within Cloudflare’s network (AS13335) and geolocated to the United States. The authoritative nameservers listed are audrey.ns.cloudflare.com and augustus.ns.cloudflare.com, confirming the use of Cloudflare’s DNS hosting. Registration records indicate that the domain was created on April 06, 2025 and was registered through NiceNIC International Group Co., Limited.

No TLS certificate was observed, meaning the site operated without HTTPS encryption. The page title returned by the server was "www.www.cnangelly.cc," suggesting a possible typo‑squatting or redirect configuration, but the actual page content was not captured before the takedown. Malware and threat intelligence scanners have flagged the domain on six of ninety‑five VirusTotal engines, implying that a subset of security products identified malicious characteristics. Independent reputation services assign low credibility scores: Gridinsoft reports a trust score of 0 out of 100, Scamadviser rates the domain at 25 out of 100, and the domain appears on one known security blocklist.

These combined signals indicate a high likelihood of credential‑harvesting activity. Defenders should continue to block the IP address 188.114.96.3, add cnangelly.net to internal phishing and URL filtering rules, and monitor for new registrations that reuse the same registrar or naming patterns. Ongoing surveillance of Cloudflare‑hosted domains linked to this ASN is advised, as threat actors often deploy fast‑flux or disposable domains within the same hosting environment.