psyopsanime[.]live

Analysis of the domain psyopsanime.live indicates a phishing infrastructure leveraging Cloudflare services, registered through NiceNIC International Group Co., Limited on February 27, 2026. The domain resolves to the IP address 172.67.196.31, which is part of AS13335 (Cloudflare, Inc.) and geolocated in the United States. At the time of assessment, the domain returned an HTTP 403 status with the page title 'Just a moment...', a common response from Cloudflare when access is restricted or the site is under active mitigation. The domain is associated with Cloudflare nameservers edna.ns.cloudflare.com and kevin.ns.cloudflare.com and employs a Let's Encrypt SSL certificate (serial number E8), suggesting an attempt to present a legitimate appearance despite its malicious intent.

Detection data reveals limited but actionable intelligence: two of ninety-three security vendors on VirusTotal flagged the domain as malicious, and it appears on three independent security blocklists, including PhishDestroy, MetaMask, and SEAL. The domain's technologies include Cloudflare's content delivery network and HTTP/3, which may be used to obfuscate the true origin of the phishing content or evade detection. No specific brand target or phishing kit has been identified in the available data, and the exact nature of the phishing content remains unconfirmed due to the domain's offline status and lack of accessible page content. Defenders should treat psyopsanime.live as an elevated-risk domain based on its registration context, hosting provider, and detection profile.

The use of Cloudflare infrastructure is consistent with phishing campaigns seeking to exploit the provider's reputation and DDoS protection to prolong operational uptime. Network administrators are advised to block the domain and its resolving IP (172.67.196.31) at the perimeter, while monitoring for related domains registered through the same registrar or utilizing identical nameserver configurations.