analogarchive[.]cc

The domain analogarchive.cc was registered on 23 March 2026 through Cloudflare, Inc. and is currently served from the Cloudflare network with the IP address 172.67.175.248, which resolves to a Cloudflare location in California. The authoritative nameservers are lynn.ns.cloudflare.com and walk.ns.cloudflare.com, and the site presents a valid Google Trust Services WE1 SSL certificate, indicating a properly configured TLS endpoint. Web requests to analogarchive.cc return HTTP 200 and the page title reads “Analog Archive | Premium Cassette, VHS, and Analog Recording Services in Natick, MA”. Despite the legitimate‑looking title, the site has been classified as a generic phishing campaign. Reputation services assign a Gridinsoft trust score of 0 / 100, and three independent blocklists (PhishDestroy, MetaMask, SEAL) already list the domain. VirusTotal analysis shows three of ninety‑five scanners flag the host, and AlienVault OTX includes it in two threat‑intel pulses, reinforcing the malicious assessment. Publicly available data does not reveal the specific brand or credential set the phishing page attempts to harvest, nor the exact payload delivered to victims. The MX records are partially visible, pointing to route1.mx.cloudflare.net with priority 9 and an additional host with priority 95, suggesting the domain may also be used for email‑based lure campaigns. The incomplete MX information and lack of visible malicious content on the landing page leave the full attack vector uncertain. Defenders should add analogarchive.cc to network and DNS blocklists, enforce TLS inspection to capture any credential submissions, and monitor for outbound connections to the 172.67.175.248 address. Email gateways should reject or quarantine messages originating from the listed MX hosts. Continuous threat‑intel feeds should be queried for any new indicators related to this domain, and incident response teams should be prepared to investigate any user reports that reference analogarchive.cc.