# PhishDestroy domain threat record: anchus.com.ar Content language: English Canonical HTML report: https://phishdestroy.io/domain/anchus.com.ar/ Machine-readable companion: https://phishdestroy.io/domain/anchus.com.ar/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-21 02:17:58 UTC - Last availability or vendor check: 2026-10-22 10:46:10 UTC - Stored record updated: 2026-10-22 16:07:29 UTC - VirusTotal detections in the stored snapshot: 8/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 170.249.216.202 - Registrar in stored WHOIS data: nicar - Last stored HTTP status: 403 - Registration date in stored WHOIS data: 2014-11-04 23:00:00 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a15c4d-d38f-716b-9edb-9af49adeafde/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/anchus.com.ar - Certificate Transparency search: https://crt.sh/?q=%25.anchus.com.ar - Web Archive lookup: https://web.archive.org/web/*/https://anchus.com.ar/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy listed anchus.com.ar on its internal blocklist after automated analysis flagged it as malicious. The recorded page title advertises “Anchus - Indumentaria Infantil | Venta Mayorista y Minorista”, a children’s clothing storefront. The domain was first seen by PhishDestroy on 2026-10-21 and returned HTTP 200 on that date. How the scam works The listing is based on reputation signals that commonly indicate phishing or other malicious activity, such as patterns in content, URL structure, or vendor detections. No specific credential‑stealing or payment‑request behavior was observed on the page. Evidence VirusTotal reported eight malicious detections from 92 engines on 2026-10-17, with vendors alphaMountain.ai, DNS8, Fortinet, Gridinsoft, Lionic, URLQuery, VIPRE and Webroot labeling it as phishing or malicious. Google Safe Browsing checked on 2026-10-21 and did not flag the domain. Two urlscan captures (2026-10-19 and 2026-10-21) returned clean or non‑malicious verdicts, the later showing a negative engine score. Cloudflare Radar on 2026-10-21 marked the domain as malicious and categorized it as phishing. OTX listed five pulses mentioning the domain, with one pulse observed on 2026-10-21. External blocklists showed zero hits, while PhishDestroy’s internal list flagged the domain. Infrastructure The domain resolved to the recorded IP 170.249.216.202, belonging to PrivateSystems Networks GA in the United States. No registrar or certificate details are available in the record. What to do Visitors should avoid entering any credentials or downloading files from anchus.com.ar unless they are certain the site is legitimate. Organizations should add the domain to web‑filtering policies and monitor network logs for connections to the recorded IP address, updating defenses as new reputation data appears. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a15c4d-d38f-716b-9edb-9af49adeafde/ VirusTotal report: https://www.virustotal.com/gui/domain/anchus.com.ar Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=anchus.com.ar Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-21 03:27:06 UTC ## Stored page captures - Primary capture: https://urlscan.io/screenshots/01a15c4d-d38f-716b-9edb-9af49adeafde.png Captured: 2026-10-21 02:34:48 UTC - URLScan capture 1: https://screenshots.phishdestroy.io/01a15c4d-d38f-716b-9edb-9af49adeafde.png Captured: 2026-10-21 02:34:48 UTC Source report: https://urlscan.io/result/01a15c4d-d38f-716b-9edb-9af49adeafde/ - URLScan capture 2: https://urlscan.io/screenshots/01a15545-23ab-73e0-a94a-2daefa50c23d.png Captured: 2026-10-21 02:17:58 UTC Source report: https://urlscan.io/result/01a15c4d-d38f-716b-9edb-9af49adeafde/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/201ed2c9-779d-4b79-b14f-ba53839e9f96.png Captured: 2026-10-21 02:24:12 UTC Source report: https://radar.cloudflare.com/scan/201ed2c9-779d-4b79-b14f-ba53839e9f96 SHA-256: cf005faa2b9ff03c5b0fa8d945c7be2932b7bb073abe355aad4aefae597e1790 - URLQuery: https://screenshots.phishdestroy.io/uq/03acdfa4-8186-437d-9dd3-0aabdf54cb8b.png Source report: https://urlquery.net/report/03acdfa4-8186-437d-9dd3-0aabdf54cb8b SHA-256: bf575fbd87aae11ce66b75e1452a399462a5888e28fd4bc49dae25d1618bb957 - URLScan · 2026-08-02: https://screenshots.phishdestroy.io/us/019fc160-e418-7733-b5b2-0ff238cd5ec7.png Captured: 2026-08-02 07:29:52 UTC Source report: https://urlscan.io/result/019fc160-e418-7733-b5b2-0ff238cd5ec7/ SHA-256: cd9677c4a4b98e36f615962c56ae220312cb6dfe73d839b4b75267bedb3a5190 - URLScan · 2026-10-09: https://screenshots.phishdestroy.io/us/01a12318-da42-7548-84e9-fd9c86841c9a.png Captured: 2026-10-09 23:57:05 UTC Source report: https://urlscan.io/result/01a12318-da42-7548-84e9-fd9c86841c9a/ SHA-256: 15d51d21b9632761e878dc0ce3098169cbdc5641e64c20899b146c0706c99a27 - URLScan · 2026-10-15: https://screenshots.phishdestroy.io/us/01a13e6b-3c69-77b4-8a15-8e4becd024d4.png Captured: 2026-10-15 07:16:32 UTC Source report: https://urlscan.io/result/01a13e6b-3c69-77b4-8a15-8e4becd024d4/ SHA-256: 42b3ab7022d325d56500f1a8006c2bf73e771fbb67b429ccd5d13899703e6664 - URLScan · 2026-10-17: https://screenshots.phishdestroy.io/us/01a14991-8db1-7676-9608-af2a982ee278.png Captured: 2026-10-17 11:14:12 UTC Source report: https://urlscan.io/result/01a14991-8db1-7676-9608-af2a982ee278/ SHA-256: 420c7559ff1d8ef606dd51aa2d9769a2435cdf34bd64969f43e5056657384745 - URLScan · 2026-10-19: https://screenshots.phishdestroy.io/us/01a15545-23ab-73e0-a94a-2daefa50c23d.png Captured: 2026-10-19 17:46:04 UTC Source report: https://urlscan.io/result/01a15545-23ab-73e0-a94a-2daefa50c23d/ SHA-256: 0adc565f08cfedf67ce0cd4a2650af709a91a6d13d51209cb524bb8be641a4a9 - URLScan · 2026-10-21: https://screenshots.phishdestroy.io/us/01a15c50-955d-74ba-beb8-984e20de1cfd.png Captured: 2026-10-21 02:35:54 UTC Source report: https://urlscan.io/result/01a15c50-955d-74ba-beb8-984e20de1cfd/ SHA-256: 4415db40385177f012fee67ccd9fc852f97683717ac71abca8a7ac445c48828d ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-21T02:55:52Z", "uuid": "01a15c4d-d38f-716b-9edb-9af49adeafde", "scanned_at": "2026-10-21T02:32:54Z", "final_url": "https://anchus.com.ar/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://anchus.com.ar/", "from": "http://anchus.com.ar/", "status": 307 } ], "ip": "170.249.216.202", "ptr": "dw31.datawebhosting.com.ar", "domains": [ "tbv.orbitalnest.net", "fonts.bunny.net", "www.google.com", "www.googletagmanager.com", "analytics.google.com", "googleads.g.doubleclick.net", "stats.g.doubleclick.net", "ad.doubleclick.net" ], "ips": [ "2a01:4f8:162:3029::2", "144.91.112.102", "142.251.20.157", "2a00:1450:4001:c21::9b", "2a00:1450:4001:c15::8b", "142.251.14.149", "142.251.150.119", "2a00:1450:4001:c25::61", "170.249.216.202" ], "asns": [ "24940", "51167", "15169", "63410" ], "countries": [ "DE", "FR", "US" ], "link_domains": [ "tiendaanchus.com.ar", "api.whatsapp.com", "www.instagram.com", "www.facebook.com" ], "social": [ "https://api.whatsapp.com/send", "https://www.instagram.com/anchuskids", "https://www.facebook.com/AnchusPaginaOficial" ], "doc_hash": "7517e4168fd20f1c36cd168bf743d0dd50726a2431a953db15ff8b28fc36f5b5", "script_hashes": [ "358a596b17bb008148f8bd051c7d63fea05b4c216963b1ee233ab7ec19130010", "7bc7c75b6870ed9f4b9d8ca54c0ecc18dce9d6ac8e407549c682f1b95c02e7e5", "bb18fbf1381175613d3dd7e0245dfe4767e6f7ce983cfc6d4b2c92ab10372c43" ], "globals": [ "dataLayer", "google_tag_data", "google_tag_manager", "onYouTubeIframeAPIReady", "gaGlobal", "GooglebQhCsO" ], "cookies": [ "_gcl_au", "_ga", "_ga_9NKEBH9NW6", "test_cookie" ], "storage_keys": [ "_gcl_ls" ], "tls": { "san": [ "anchus.com.ar", "www.anchus.com.ar" ], "cipher": "AES_128_GCM", "issuer": "YE1", "subject": "anchus.com.ar", "protocol": "TLS 1.3", "valid_to": "2027-01-11T16:46:11Z", "valid_from": "2026-10-13T16:46:12Z" }, "domain_age_days": 2612, "apex_age_days": 2612, "tls_age_days": 7, "tls_valid_days": 89, "requests": 56, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": -58, "malicious": false }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "LiteSpeed", "content-type": "text/html", "x-frame-options": "SAMEORIGIN", "x-content-type-options": "nosniff", "referrer-policy": "strict-origin-when-cross-origin" } }, "cf": { "v": 1, "fetched_at": "2026-10-21T02:28:20Z", "uuid": "201ed2c9-779d-4b79-b14f-ba53839e9f96", "scanned_at": "2026-10-21T02:24:12Z", "final_url": "https://anchus.com.ar/", "status": 200, "history": [ { "url": "https://anchus.com.ar/", "status": 200 } ], "dom_hash": "679b50b4f585f6475b1288c4d830b0d0797457cc28fca3df0c06d43ebb764a61", "doc_hash": "7517e4168fd20f1c36cd168bf743d0dd50726a2431a953db15ff8b28fc36f5b5", "domain_risks": [ "Phishing", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "anchus.com.ar", "type": "A", "value": "170.249.216.202" } ], "dnssec_valid": false, "ip": "170.249.216.202", "verdict": { "tags": [ "phishing" ], "malicious": true, "categories": [ "phishing" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-21T03:24:33Z", "analysis_at": "2026-10-17T14:39:51Z", "stats": { "timeout": 0, "harmless": 52, "malicious": 8, "suspicious": 0, "undetected": 32 }, "detections": { "DNS8": "phishing", "VIPRE": "phishing", "Lionic": "phishing", "Webroot": "malicious", "Fortinet": "phishing", "URLQuery": "malicious", "Gridinsoft": "phishing", "alphaMountain.ai": "phishing" }, "reputation": 0, "popularity": { "Alexa": 87039, "Statvoo": 123112, "Cisco Umbrella": 985369 }, "registrar": "nicar", "first_seen": "2023-12-23T10:14:43Z", "dns": [ { "ttl": 600, "type": "A", "value": "170.249.216.202" }, { "ttl": 3600, "type": "NS", "value": "ns5.godns.net" }, { "ttl": 21600, "type": "TXT", "value": "v=spf1 include:_spf.godns.net ~all" }, { "ttl": 3600, "type": "MX", "value": "mx4.anchus.com.ar", "priority": 10 }, { "ttl": 3600, "type": "MX", "value": "mx3.anchus.com.ar", "priority": 10 }, { "ttl": 3600, "type": "MX", "value": "mx1.anchus.com.ar", "priority": 10 }, { "ttl": 3600, "type": "NS", "value": "ns6.godns.net" }, { "ttl": 2560, "type": "SOA", "rname": "hostmaster.anchus.com.ar", "value": "ns1.godns.net" }, { "ttl": 3600, "type": "MX", "value": "mx2.anchus.com.ar", "priority": 10 }, { "ttl": 3600, "type": "NS", "value": "ns1.godns.net" }, { "ttl": 3600, "type": "NS", "value": "ns3.godns.net" }, { "ttl": 3600, "type": "NS", "value": "ns4.godns.net" }, { "ttl": 3600, "type": "NS", "value": "ns2.godns.net" } ], "dns_at": "2026-10-17T14:40:08Z", "jarm": "27d27d27d00027d00042d43d00041dba951fb796b4b956c9799ba19149e94a", "cert": { "san": [ "anchus.com.ar", "www.anchus.com.ar" ], "issuer": "Let's Encrypt / YE1", "serial": "6543cf9b6aed8bde51a6ed5c8a41076a9ae", "sha256": "01e11b2d4622aa539035e033a2d92301c2495b9ce06bf1f58481acdc569db210", "subject": "anchus.com.ar", "valid_to": "2027-01-11T16:46:11Z", "valid_from": "2026-10-13T16:46:12Z" }, "whois": { "registrar": "nicar" } }, "webcheck": { "v": 1, "fetched_at": "2026-10-21T02:28:34Z", "mail_config": { "mx": [ "mx3.anchus.com.ar", "mx4.anchus.com.ar", "mx1.anchus.com.ar", "mx2.anchus.com.ar" ], "spf": "v=spf1 include:_spf.godns.net ~all", "dkim": [ "default" ], "dmarc": true, "dkim_bits": 2048, "spf_lookups": 4 }, "caa_records": { "domain": "anchus.com.ar" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-10-21T02:21:52Z", "first": "2007-05-24T23:13:28Z", "changes": 104, "days_archived": 131, "scans_per_day": 0.02, "avg_page_bytes": 11246 }, "robots_txt": { "agents": [ "*" ], "present": true, "sitemaps": [ "https://anchus.com.ar/sitemap.xml" ] }, "social_tags": { "title": "Anchus - Indumentaria Infantil | Venta Mayorista y Minorista", "description": "Anchus Indumentaria Infantil - Colección Primavera Verano 2027. Venta por mayor y menor en todo el país. Recién nacido, bebés, nenas, nenes y colegial." }, "trackers": { "requests": 42, "trackers": [ { "name": "Google", "company": "Google", "country": "US", "category": "Advertising", "requests": 3 }, { "name": "Google Analytics with signals", "company": "Google", "country": "US", "category": "Advertising", "requests": 1 }, { "name": "Google Marketing Platform", "company": "Google", "country": "US", "category": "Advertising", "requests": 2 }, { "name": "Google Tag", "company": "Google", "country": "US", "category": "Advertising", "requests": 3 }, { "name": "Bunny CDN", "company": "BunnyWay", "country": "SI", "category": "Hosting", "requests": 2 }, { "name": "Google Tag Manager", "company": "Google", "country": "US", "category": "Utilities", "requests": 1 } ] }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 200, "timings": { "dns": 495, "tls": 117, "wait": 108, "connect": 105, "download": 0 }, "response_ms": 825 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 21, 25, 53, 80, 110, 143, 443, 587, 993, 995 ] }, "carbon": { "bytes": 1974, "co2_grams": 0.0001, "cleaner_than": 95 }, "dns_server": { "ns": [ { "ip": "190.105.202.20", "host": "ns2.godns.net" }, { "ip": "190.228.29.45", "host": "ns1.godns.net" }, { "ip": "190.105.236.110", "host": "ns4.godns.net" }, { "ip": "190.228.29.245", "host": "ns3.godns.net" }, { "ip": "190.105.236.111", "host": "ns5.godns.net" }, { "host": "ns6.godns.net" } ], "zone": "anchus.com.ar" }, "cookies": { "cookies": [ { "name": "_gcl_au" }, { "name": "_ga" }, { "name": "_ga_9NKEBH9NW6" } ] }, "location": { "ip": "170.249.216.202", "asn": "63410", "org": "PrivateSystems Networks", "city": "Atlanta", "country": "US" }, "ssl": { "issuer": "Let's Encrypt / YE1", "subject": "anchus.com.ar" }, "dns": { "A": [ "170.249.216.202" ], "MX": [ "{\"exchange\": \"mx2.anchus.com.ar\", \"priority\": 10}", "{\"exchange\": \"mx4.anchus.com.ar\", \"priority\": 10}", "{\"exchange\": \"mx3.anchus.com.ar\", \"priority\": 10}", "{\"exchange\": \"mx1.anchus.com.ar\", \"priority\": 10}" ], "NS": [ "ns3.godns.net", "ns6.godns.net", "ns4.godns.net", "ns2.godns.net", "ns1.godns.net", "ns5.godns.net" ], "SOA": "{\"nsname\": \"ns1.godns.net\", \"hostmaster\": \"hostmaster.anchus.com.ar\", \"serial\": 1792540800, \"refresh\": 10800, \"retry\": 3600, \"expire\": 604800, \"minttl\": 3600}", "TXT": [ "v=spf1 include:_spf.godns.net ~all" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": "SAMEORIGIN", "referrerPolicy": "strict-origin-when-cross-origin", "xXSSProtection": "1; mode=block", "permissionsPolicy": false, "xContentTypeOptions": "nosniff", "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "170.249.216.202", "family": 4 }, "redirects": { "chain": [ "https://anchus.com.ar" ] }, "rank": { "domain": "anchus.com.ar" }, "tech_stack": { "technologies": [ "LiteSpeed", "Google Tag Manager", "Google Analytics", "WhatsApp Business Chat", "Priority Hints", "HTTP/3" ] }, "headers": { "headers": { "server": "LiteSpeed", "content-type": "text/html", "x-frame-options": "SAMEORIGIN", "x-content-type-options": "nosniff", "referrer-policy": "strict-origin-when-cross-origin" } } } } ```