account[.]animus[.]store

The domain account.animus.store has been identified as a credential phishing threat. It is associated with attempts to steal user credentials, likely targeting a specific brand or service. No specific brand or drainer kit has been identified in the available intelligence.

Technical indicators show that account.animus.store has a VirusTotal score of 6/95, indicating a moderate level of suspicion among security vendors. The domain is registered through NameCheap, Inc., and resolves to the IP address 135.181.110.230. The domain was created on March 27, 2026, and appears on one security blocklist. It is also blocked by the PhishDestroy system. The SSL certificate for the domain is issued by Let's Encrypt, which is a common practice for phishing sites to gain user trust.

As of the latest update, the domain has been taken down. Initial response actions included blocking the domain and its associated IP address to prevent further credential theft. The domain's presence on a single security blocklist and the moderate VirusTotal score suggest that while the threat has been mitigated, there remains a risk of residual impact on affected users. Organizations and individuals who may have interacted with the domain are advised to monitor their accounts for any unauthorized activity and consider changing their passwords.