anthonytraders[.]in

Analysis of the domain anthonytraders.in indicates active phishing infrastructure targeting users through a generic trading-themed portal. The domain was registered on May 15, 2026, via Good Domain Registry Private Limited and resolves to the IP address 216.10.246.131. Infrastructure analysis reveals the use of WordPress, MySQL, PHP, Bootstrap, Yoast SEO, Nginx, Apache HTTP Server, and Slider Revolution, suggesting a standardized content management setup commonly exploited for phishing operations. The SSL certificate is issued by Let's Encrypt, a frequent choice for both legitimate and malicious sites due to its accessibility and automation. The domain appears in 17 threat intelligence pulses on AlienVault OTX, signaling repeated inclusion in security community reporting. Detection data from security vendors indicates that 6 of 95 engines flag the domain as malicious, while it is blocked by at least two security blocklists, including PhishDestroy and BLP-Malware. The Gridinsoft trust score of 10/100 further corroborates the high-risk classification. The page title, 'Home - ANTHONY TRADERS,' suggests an attempt to establish legitimacy under the guise of a trading or commercial entity, though the exact content and targeted brand remain unconfirmed. Defenders are advised to treat this domain as active phishing infrastructure. Network-level blocking of the IP 216.10.246.131 and domain-based filtering for anthonytraders.in are recommended to mitigate exposure. Given the domain's recent registration and persistent presence in threat intelligence feeds, continuous monitoring for related infrastructure or newly registered lookalike domains is warranted. The absence of confirmed brand impersonation does not reduce the risk; generic phishing portals often adapt their lures dynamically.