anthropic5[.]com

Analysis of anthropic5.com indicates an active phishing domain registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. The domain resolves to 172.67.177.23, a Cloudflare IP address located in Canada, and uses Cloudflare nameservers (izabella.ns.cloudflare.com and randy.ns.cloudflare.com). The SSL certificate is issued by Google Trust Services (WE1), a common configuration for both legitimate and malicious sites leveraging Cloudflare's infrastructure. The domain is currently flagged by six of 91 security vendors on VirusTotal and appears in 12 threat intelligence pulses on AlienVault OTX, suggesting prior malicious activity. It is also blocked by PhishDestroy and listed on one additional security blocklist. The HTTP response code is 403 (Forbidden), and the page title is 'Just a moment...', a default Cloudflare interstitial that often appears during bot challenges or misconfigured deployments. No specific brand targeting or phishing kit has been identified in the available data, and the exact content of the site remains unconfirmed. Defenders should treat this domain as high-risk due to its presence on multiple threat intelligence feeds and its use of Cloudflare infrastructure, which is frequently abused for phishing operations. Network-level blocking of 172.67.177.23 and monitoring for related subdomains or newly registered lookalike domains is recommended. Further analysis of the site's content, if accessible, would be required to determine the precise phishing campaign or target.