psyopanime[.]xyz

This domain, psyopanime.xyz, is flagged as a high-risk generic phishing threat actively serving a credential harvesting page titled $PSYOPANIME. The domain was registered on February 21, 2026, through Porkbun LLC, a registrar commonly associated with low-cost, high-volume domain registrations that are often exploited for malicious campaigns. Infrastructure analysis reveals the domain resolves to IP address 147.79.120.128, hosted on AS47583 (Hostinger International Limited) in the United States, and uses nameservers ns1.dns-parking.com and ns2.dns-parking.com. The presence of a valid Let's Encrypt SSL certificate and a 200 HTTP status code indicates the phishing page is fully operational and accessible to potential victims. VirusTotal data shows 6 out of 95 security vendors flag this domain, and it appears on one security blocklist, with AlienVault OTX confirming its inclusion in a single threat intelligence pulse. The site employs WordPress, MySQL, PHP, jQuery, and Hostinger CDN technologies, suggesting a compromised or maliciously deployed content management system used to host the phishing page. The Gridinsoft trust score of 1/100 further corroborates the high-risk assessment. Key uncertainties remain regarding the full scope of the campaign, including the specific brand or service being impersonated, the total number of victims, and whether the domain is part of a larger phishing infrastructure. Defenders should immediately add this domain to blocklists, monitor for related domains registered through Porkbun LLC or hosted on Hostinger IP ranges, and analyze the page content to identify targeted credentials. Users who have visited the site or submitted information should be advised to change passwords and enable multi-factor authentication on affected accounts. Ongoing monitoring of the domain’s activity and associated IP addresses is recommended to track potential infrastructure pivots.