anagomonad[.]meme

Analysis on 25 July 2026 shows that the domain anagomonad.meme is actively used to impersonate the debridge brand in a crypto‑related scam. The site resolves to 199.36.158.100, an IP owned by Fastly, Inc. (ASN 54113) and is hosted in the United States. Registration data indicates the domain was created on 21 November 2025 through NameCheap, Inc., and it uses the registrar‑provided nameservers dns1.registrar-servers.com and dns2.registrar-servers.com. The TLS certificate is issued by Google Trust Services under the WR3 intermediate, and the site enforces HSTS while serving content over HTTP/3, suggesting a modern web stack.

The page currently returns HTTP 200 and displays the title "DogWeb - Got that dawg in you?"; no further content analysis is available, but the title does not reference debridge, reinforcing the likelihood of brand‑spoofing. VirusTotal scans have flagged the domain in 5 of 95 vendor engines, and the domain appears on at least one public blocklist and is listed by PhishDestroy as malicious. Gridinsoft’s trust score of 0 / 100 further reflects a low reputation.

While the exact phishing mechanics (e.g., credential capture forms or malicious payload delivery) have not been publicly documented, the combination of brand impersonation, a crypto‑scam classification, and multiple detection signals warrants high‑risk handling. Defenders should block the domain at DNS and proxy layers, add the associated IP range to network‑level deny lists, and monitor for related Fastly‑hosted assets that reference debridge or crypto terminology. Continuous re‑evaluation is advised in case additional indicators, such as malicious scripts or credential‑stealing pages, emerge.