anonymixer[.]app

This domain, anonymixer.app, is identified as a brand impersonation threat targeting Google’s reputation to facilitate cryptocurrency fraud. Analysis indicates the site masquerades as an anonymous Bitcoin mixer, a common tactic to lure victims into transferring funds under false pretenses. The infrastructure is designed to exploit trust in established brands while obfuscating illicit financial transactions, aligning with known crypto drainer operations. Technical indicators confirm elevated risk: the domain is flagged by 5 out of 95 security vendors on VirusTotal, with detections spanning phishing and malicious activity. It was registered through NiceNIC International Group Co., Limited, and resolves to IP address 172.67.221.74, a Cloudflare-protected endpoint utilizing HTTP/3. The SSL certificate is issued by Let’s Encrypt, a common tool for both legitimate and malicious actors. The domain appears on three security blocklists and is actively blocked by MetaMask, SEAL, and PhishDestroy. Gridinsoft assigns a trust score of 0/100, further corroborating its malicious classification. As of the latest assessment, anonymixer.app has been taken offline, likely due to enforcement actions or infrastructure takedowns. However, residual risk persists due to the transient nature of such domains. Victims who interacted with the site may remain exposed to financial loss or secondary attacks. Users are advised to verify domain authenticity before engaging with cryptocurrency services, monitor transactions for unauthorized activity, and report suspicious domains to relevant security platforms. Continuous monitoring of related infrastructure is recommended to preempt potential resurgence under altered domains or IPs.