ani-chat[.]fun

Analysis of the domain ani-chat.fun indicates it was registered on July 18, 2025, through the registrar Atak Domain, with nameservers configured to HANS.NS.CLOUDFLARE.COM and NADIA.NS.CLOUDFLARE.COM. The domain resolved to the IP address 172.67.168.12, which is associated with Cloudflare, Inc. (AS13335) in the United States. As of the report date, the domain has been taken offline, though its prior status suggests involvement in generic phishing activity. The page title captured during initial scans was 'Just a moment...', a common placeholder or interstitial response that does not reveal specific targeting or brand impersonation.

Infrastructure analysis reveals the use of Cloudflare services, which may have been employed to obscure the true hosting origin or to leverage SSL capabilities, though no SSL certificate was detected for this domain. Detection by security vendors remains limited; one of ninety-five vendors on VirusTotal flagged the domain as malicious. The domain appears on a single security blocklist, and Gridinsoft assigned it a trust score of 0/100, further indicating its association with phishing infrastructure. The registrar, Atak Domain, has been previously linked to domains involved in fraudulent schemes, though no direct evidence ties this registrar to the specific intent of ani-chat.fun.

Defenders should note that while the domain is currently offline, its prior resolution and detection history warrant continued monitoring. The lack of an SSL certificate and the minimal detection count do not diminish the elevated risk classification, as phishing domains often operate briefly before being flagged or taken down. Organizations are advised to block the domain and its associated IP address (172.67.168.12) at the network level, and to review logs for any prior connections to this infrastructure. Further analysis of related domains registered through Atak Domain or resolving to Cloudflare IPs may uncover additional threats in this campaign.