# PhishDestroy domain threat record: ankegrames.net Content language: English Canonical HTML report: https://phishdestroy.io/domain/ankegrames.net/ Machine-readable companion: https://phishdestroy.io/domain/ankegrames.net/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-26 23:03:04 UTC - Last availability or vendor check: 2026-10-27 12:30:38 UTC - Stored record updated: 2026-10-27 23:21:03 UTC - VirusTotal detections in the stored snapshot: 0/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored classification - Targeted brand: minecraft ## Stored infrastructure - Observed IP address: 188.114.96.3 - Registrar in stored WHOIS data: NICENIC INTERNATIONAL GROUP CO., LIMITED - Last stored HTTP status: 301 - Registration date in stored WHOIS data: 2026-10-23 19:09:37 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a17a73-894e-77ce-bf7b-13fe10e971bd/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/ankegrames.net - Certificate Transparency search: https://crt.sh/?q=%25.ankegrames.net - Web Archive lookup: https://web.archive.org/web/*/https://ankegrames.net/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy’s automated assessment classifies ankegrames.net as an impersonation phishing page. When checked on 2026-10-27 the domain returned an HTTP 301 redirect to ankergamers.com. The page metadata advertises free pre‑installed PC games, mimicking the AnkerGames brand. PhishDestroy first recorded the domain on 2026-10-27, four days after its registration on 2026-10-23. How the scam works Impersonation phishing typically uses a look‑alike domain to forward visitors to a site that copies a legitimate brand’s appearance. The redirect aims to trick users into entering credentials, personal data, or downloading malicious files that the attacker can harvest. Evidence VirusTotal scanned the domain on 2026-10-27 with 92 engines and reported zero detections. Google Safe Browsing checked the same day and did not flag the domain. Spamhaus DBL listed ankegrames.net as spam on 2026-10-27. OTX recorded four pulses mentioning the domain on 2026-10-27. PhishDestroy’s internal blocklist marks the domain as malicious. URLScan captured the redirect chain on 2026-10-27; its engine analysis gave a malicious score of 81 with tags, while the overall verdict was non‑malicious. Infrastructure The domain was registered with NICENIC INTERNATIONAL GROUP CO., LIMITED on 2026-10-23 and expires on 2027-10-23; the WHOIS record shows clientDeleteProhibited and clientTransferProhibited status. Authoritative nameservers are kaiser.ns.cloudflare.com and suzanne.ns.cloudflare.com. TLS was provided by Let’s Encrypt, valid from 2026-10-23 to 2027-01-21. The recorded IP address for the redirect target is 172.67.174.109, a Cloudflare edge node, and the site is served behind Cloudflare’s WAF. Domain age, apex age and TLS age are three days as of the observation. What to do Users should avoid clicking the link and never enter credentials on the redirected site; if credentials were entered, change the associated passwords immediately. Security teams should block ankegrames.net at firewalls or proxies, monitor logs for requests to the domain, and add it to internal blocklists. No wallet‑related remediation is required because no wallet activity was observed. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a17a73-894e-77ce-bf7b-13fe10e971bd/ Cloudflare Radar report: https://radar.cloudflare.com/scan/c629be9e-2db0-4fee-8e50-0b7c3119740a Stored capture screenshot: https://i.ibb.co/DDkq0t1K/0fd40260a962.png Cloudflare Radar screenshot (2026-10-26T23:37:24Z): https://screenshots.phishdestroy.io/cf/c629be9e-2db0-4fee-8e50-0b7c3119740a.png URLScan screenshot (2026-10-26T22:54:23Z): https://screenshots.phishdestroy.io/us/01a17a6b-dfca-7395-99ad-95bfcac5ef5b.png URLScan capture report: https://urlscan.io/result/01a17a6b-dfca-7395-99ad-95bfcac5ef5b/ URLScan screenshot (2026-10-26T23:00:14Z): https://screenshots.phishdestroy.io/us/01a17a71-434a-7449-823c-f68140d7f893.png URLScan capture report: https://urlscan.io/result/01a17a71-434a-7449-823c-f68140d7f893/ VirusTotal report: https://www.virustotal.com/gui/domain/ankegrames.net Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=ankegrames.net Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-27 00:09:13 UTC ## Stored page captures - Primary capture: https://i.ibb.co/DDkq0t1K/0fd40260a962.png Captured: 2026-10-26 23:03:04 UTC - URLScan capture 1: https://screenshots.phishdestroy.io/01a17a73-894e-77ce-bf7b-13fe10e971bd.png Captured: 2026-10-26 23:03:04 UTC Source report: https://urlscan.io/result/01a17a73-894e-77ce-bf7b-13fe10e971bd/ - URLScan · 2026-10-26: https://screenshots.phishdestroy.io/us/01a17a6b-dfca-7395-99ad-95bfcac5ef5b.png Captured: 2026-10-26 22:54:23 UTC Source report: https://urlscan.io/result/01a17a6b-dfca-7395-99ad-95bfcac5ef5b/ SHA-256: b59f95a32e8b7b832c2132414c38bc7d5ccf97356a2125af8d8bd115fd351dba - URLScan · 2026-10-26: https://screenshots.phishdestroy.io/us/01a17a71-434a-7449-823c-f68140d7f893.png Captured: 2026-10-26 23:00:14 UTC Source report: https://urlscan.io/result/01a17a71-434a-7449-823c-f68140d7f893/ SHA-256: 8d86fb2ce6805a40c5288cfb8008956d51a959f12c6c5f0e28bc287b58472d2f - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/c629be9e-2db0-4fee-8e50-0b7c3119740a.png Captured: 2026-10-26 23:37:24 UTC Source report: https://radar.cloudflare.com/scan/c629be9e-2db0-4fee-8e50-0b7c3119740a SHA-256: 6a6eb9ed30bc9b9d1a73a872df625c87d126f006e43aba9edd83c8376f10f270 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-26T23:32:26Z", "uuid": "01a17a73-894e-77ce-bf7b-13fe10e971bd", "scanned_at": "2026-10-26T23:02:47Z", "final_url": "https://ankergamers.com/", "status": 200, "redirected": "off-domain", "redirects": [ { "to": "https://ankergamers.com/", "from": "https://ankegrames.net/", "status": 301 } ], "ip": "172.67.174.109", "domains": [ "video.akamai.steamstatic.com", "cdn.jsdelivr.net", "luugy.com", "my.rtmark.net", "llvpn.com", "ankergames.net", "static.cloudflareinsights.com", "ankegrames.net" ], "ips": [ "23.219.161.149", "151.101.65.229", "139.45.197.106", "104.18.41.22", "172.67.154.229", "104.26.0.43", "104.16.80.73", "172.67.174.109", "172.67.133.206" ], "asns": [ "20940", "54113", "9002", "13335" ], "countries": [ "US", "DE" ], "link_domains": [ "discord.gg", "www.reddit.com", "nebulo.click", "store.steampowered.com", "status.ankergames.net", "www.youtube.com", "www.tiktok.com" ], "social": [ "https://discord.gg/nnMnGzDbwg", "https://www.youtube.com/@AnkerGames_net", "https://www.tiktok.com/@ankergames" ], "script_hashes": [ "39bea2e3fe29fe935507a6a2e2b4d3ffac45e22ffcad61a151d4138c137ad508", "cadf29dde649efcaae0a7494809a63a705b5bdb6aa052cf9683ece45c1f1968c", "8365122ca047c598d622b344b292f40253ad68d994277a165e98a70bfa96f081", "7675e43f2322a86677d052e1ceb2b2e1efd2b33ccd46f9d95ba9b2a3df95c9c9", "95305d741e5f50bbe440df2d52b70086119c0076df111071929c5ddaf2d54cf0" ], "globals": [ "gameOfTheDay", "youtubeFacade", "hlsVideoPlayer", "loadHls", "livewireScriptConfig", "__mirrorEv", "__mirrorErr", "Swiper", "Livewire", "Alpine", "__uiPostCardRegistered", "__genrePool", "__cfBeacon", "__ds3dcv__", "i1jaj1t6zz", "y794vf5yeyf", "zfgformats", "zfgstorage", "onClickTrigger", "syncCallbacks", "isSyncing", "zfgloadedpopup", "__hlsLoading", "Hls" ], "cookies": [ "ID" ], "storage_keys": [ "ag_dice_intro", "__foo", "syncId", "syncOrigin", "syncDate", "syncFsa" ], "domain_age_days": 3, "apex_age_days": 3, "tls_age_days": 3, "tls_valid_days": 89, "requests": 91, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 81, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "content-type": "image/png" } }, "cf": { "v": 1, "fetched_at": "2026-10-26T23:42:23Z", "uuid": "c629be9e-2db0-4fee-8e50-0b7c3119740a", "scanned_at": "2026-10-26T23:37:24Z", "final_url": "https://ankergamers.com/", "status": 200, "redirected": "off-domain", "history": [ { "url": "https://ankegrames.net/", "status": 301 }, { "url": "https://ankergamers.com/", "status": 200 } ], "dom_hash": "0bd6dc4f617277ceae7d014dd1f0cdd70644ab7851c15f353f9df8674400921a", "doc_hash": "e7e588c562eb170c033e014ff172d1f62f2901dc4964cc9ef3f0e361caa0cb77", "domain_risks": [ "New Domains", "Security Risks" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "ankergamers.com", "type": "A", "value": "172.67.174.109" }, { "name": "ankergamers.com", "type": "A", "value": "104.21.72.38" }, { "name": "ankergamers.com", "type": "AAAA", "value": "2606:4700:3034::6815:4826" }, { "name": "ankergamers.com", "type": "AAAA", "value": "2606:4700:3034::ac43:ae6d" } ], "dnssec_valid": false, "ip": "172.67.174.109", "whois": { "registrar": "NICENIC INTERNATIONAL GROUP CO., LIMITED", "created": "2026-10-23T21:09:31Z", "updated": "2026-10-23T21:09:31Z", "expires": "2027-10-23T21:09:31Z", "nameservers": [ "kaiser.ns.cloudflare.com", "suzanne.ns.cloudflare.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-27T00:06:53Z", "analysis_at": "2026-10-26T23:40:53Z", "stats": { "timeout": 0, "harmless": 56, "malicious": 0, "suspicious": 0, "undetected": 36 }, "reputation": 0, "registrar": "NICENIC INTERNATIONAL GROUP CO., LIMITED", "created": "2026-10-23T21:09:38Z", "expires": "2027-10-23T21:09:37Z", "updated": "2026-10-23T21:09:38Z", "first_seen": "2026-01-16T08:24:25Z", "dns": [ { "ttl": 300, "type": "AAAA", "value": "2606:4700:3035::6815:5c7" }, { "ttl": 300, "type": "A", "value": "172.67.133.206" }, { "ttl": 21600, "type": "NS", "value": "suzanne.ns.cloudflare.com" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "kaiser.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "kaiser.ns.cloudflare.com" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3033::ac43:85ce" }, { "ttl": 300, "type": "A", "value": "104.21.5.199" } ], "dns_at": "2026-10-26T23:46:10Z", "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c", "cert": { "san": [ "*.ankegrames.net", "ankegrames.net" ], "issuer": "Let's Encrypt / YE2", "serial": "695d89b3e319dcc6304af61b676829ca62d", "sha256": "65fe86a959d2ff0e5d329aa14c543cc44afd8ddfd2e529fe6c1db4b0f3540790", "subject": "ankegrames.net", "valid_to": "2027-01-21T20:17:04Z", "valid_from": "2026-10-23T20:17:05Z" }, "whois": { "registrar": "NICENIC INTERNATIONAL GROUP CO., LIMITED", "registrar_iana_id": "3765", "registrar_url": "https://nicenic.com", "created": "2026-10-23T21:09:37Z", "updated": "2026-10-23T21:09:38Z", "expires": "2027-10-23T21:09:37Z", "status": [ "clientDeleteProhibited", "clientTransferProhibited" ], "nameservers": [ "kaiser.ns.cloudflare.com", "suzanne.ns.cloudflare.com" ], "dnssec": "unsigned" }, "rdap": { "status": [ "client delete prohibited", "client transfer prohibited" ], "events": { "expiration": "2027-10-23T21:09:37Z", "registration": "2026-10-23T21:09:38Z", "registrar expiration": "2027-10-23T21:09:37Z", "last update of RDAP database": "2026-10-23T21:09:38Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-26T23:42:45Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "ankegrames.net" }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "robots_txt": { "agents": [ "*" ], "present": true, "sitemaps": [ "https://ankergamers.com/sitemap.xml" ] }, "sitemap": { "present": true, "url_count": 4170 }, "social_tags": { "ogUrl": "https://ankergamers.com/", "title": "AnkerGames » Free Pre-installed PC Games - Download & Play", "ogType": "website", "robots": "index, follow", "ogImage": "https://ankergamers.com/static/img/logo.png", "ogTitle": "AnkerGames » Free Pre-installed PC Games - Download & Play", "ogSiteName": "AnkerGames", "description": "Free pre-installed PC games with direct downloads. Every game is kept at its latest Steam build, checked against SteamDB, and ready to play after extracting.", "twitterCard": "summary_large_image", "canonicalUrl": "https://ankergamers.com/", "ogDescription": "Free pre-installed PC games with direct downloads. Every game is kept at its latest Steam build, checked against SteamDB, and ready to play after extracting." }, "trackers": { "requests": 49 }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 301, "timings": { "dns": 2, "tls": 49, "wait": 16, "connect": 39, "download": 0 }, "response_ms": 106 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1", "TLSv1.1", "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443, 8080 ] }, "carbon": { "bytes": 460814, "co2_grams": 0.0169, "cleaner_than": 1 }, "dns_server": { "ns": [ { "ip": "172.64.35.9", "host": "kaiser.ns.cloudflare.com" }, { "ip": "108.162.194.87", "host": "suzanne.ns.cloudflare.com" } ], "zone": "ankegrames.net" }, "location": { "ip": "2a06:98c1:3120::3", "asn": "13335", "org": "CloudFLARENET-EU", "city": "London", "country": "GB" }, "ssl": { "issuer": "Let's Encrypt / YE2", "subject": "ankegrames.net" }, "dns": { "A": [ "188.114.97.3", "188.114.96.3" ], "NS": [ "suzanne.ns.cloudflare.com", "kaiser.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"kaiser.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2418352961, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}", "AAAA": [ "2a06:98c1:3120::3", "2a06:98c1:3121::3" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "firewall": { "waf": "Cloudflare", "has_waf": true }, "get_ip": { "ip": "2a06:98c1:3121::3", "family": 6 }, "redirects": { "chain": [ "https://ankegrames.net", "https://ankergamers.com/" ], "count": 1 }, "tech_stack": { "technologies": [ "Cart Functionality", "PHP", "Laravel", "Alpine.js", "Swiper", "Priority Hints", "Livewire", "PWA", "Open Graph" ] }, "linked_pages": { "external": [ "https://discord.gg/nnMnGzDbwg", "https://www.reddit.com/r/Anker_Games_/", "https://store.steampowered.com/app/3905010", "https://nebulo.click/", "https://status.ankergames.net/", "https://www.youtube.com/@AnkerGames_net", "https://www.tiktok.com/@ankergames" ], "external_count": 7, "internal_count": 212 }, "whois": { "registrar": "NICENIC INTERNATIONAL GROUP CO., LIMITED", "created": "2026-10-23T21:09:37Z", "updated": "2026-10-23T21:09:38Z", "expires": "2027-10-23T21:09:37Z", "status": [ "clientDeleteProhibited https://icann.org/epp", "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "kaiser.ns.cloudflare.com", "suzanne.ns.cloudflare.com" ] }, "headers": { "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8" } } } } ```