aniora[.]net

Analysis of aniora.net, registered through Fewmoretaps OU d/b/a Trustname.com on July 29 2026, indicates active phishing infrastructure. The domain resolves to the IPv4 address 99.83.231.61 and is served via Cloudflare nameservers mallory.ns.cloudflare.com and sage.ns.cloudflare.com. Hosting fingerprints show Netlify as the underlying platform and HTTP Strict Transport Security (HSTS) is enforced, suggesting a deliberately hardened delivery environment.

The domain appears on a single external blocklist and has been flagged by the PhishDestroy community feed, confirming that security operators have observed malicious use. VirusTotal records show that the site was scanned by 91 independent vendors; none reported a detection at the time of analysis, which does not constitute a safety guarantee. No public Safe Browsing or Open Threat Exchange entries are currently associated with the domain, and no page title or brand targeting information has been disclosed publicly.

The lack of visible brand impersonation details limits attribution of the specific phishing lure, but the combination of recent registration, Netlify hosting, HSTS, and blocklist presence aligns with typical credential‑harvesting campaigns. Defenders should continue to block aniora.net at perimeter filters, monitor DNS queries for the associated IP and nameservers, and add the domain to internal threat intelligence feeds. Ongoing observation of any changes to the hosting stack, SSL certificate issuance, or emergence of page‑title data is recommended to refine remediation actions.