ansemsblackbull[.]com

This domain, ansemsblackbull.com, was registered on July 16, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, and remains active as of July 17, 2026. Infrastructure analysis reveals the domain resolves to IP address 172.67.205.135 and uses an SSL certificate issued by Google Trust Services. The page title, 'The Black Bull | $ANSEM,' suggests a focus on cryptocurrency, likely targeting users familiar with the $ANSEM token or related projects. One of 95 security vendors on VirusTotal has flagged the domain, indicating potential malicious intent, though further validation is required to confirm the exact nature of the threat. The domain exhibits characteristics consistent with phishing infrastructure, including recent registration and association with a cryptocurrency-related brand. However, the specific content of the site has not been analyzed, and the exact tactics, such as credential harvesting or token theft, remain unconfirmed. Defenders should treat this domain as high-risk and consider blocking or monitoring traffic to and from it. Additional investigation, including sandbox analysis or endpoint detection, is recommended to determine the full scope of the threat. No evidence currently links this domain to a known phishing kit or broader campaign.