analyzr[.]fun

The domain analyzr.fun is identified as a high-risk token drainer, a specialized form of phishing designed to steal user tokens, particularly in the context of cryptocurrency. This domain does not appear to be associated with a specific brand or fraudulent kit, but its title 'analyzr — Decode Every Token' suggests a malicious intent to deceive users into revealing sensitive information.

Technical indicators for analyzr.fun include a VirusTotal score of 8/95, indicating that 8 out of 95 security vendors have flagged this domain as malicious. The domain is registered through PDR Ltd. d/b/a PublicDomainRegistry.com and resolves to the IP address 104.21.89.76, which is hosted by Cloudflare, Inc. (AS13335) in the United States. The domain was created on May 07, 2026, and it appears on 3 security blocklists, further confirming its malicious nature. The SSL certificate for the domain is issued by Let's Encrypt with the serial number E8.

The domain is currently active, and response actions should be taken immediately to prevent further compromise. These actions include blocking the domain at the network and endpoint level, educating users about the risks of token drainers, and monitoring for any related malicious activity. Despite the current blocking measures in place, the domain remains a significant threat, and ongoing vigilance is necessary to mitigate the risk of credential theft and financial loss.