dhrubajp[.]com

Analysis indicates that dhrubajp.com is currently active and exhibits multiple indicators of compromise consistent with a phishing operation. The domain resolves to the IPv4 address 192.185.73.57 and is served by four name servers (ns1.namesell.biz, ns2.namesell.biz, ns537.websitewelcome.com, ns538.websitewelcome.com). Registration data shows the domain was created on 12 June 2018 through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar known for low‑cost bulk registrations. Google Safe Browsing has classified the site under the “SOCIAL_ENGINEERING” category, and VirusTotal records show that nine out of ninety‑one scanning engines have flagged the domain, reinforcing the suspicion of malicious use. No public page content has been disclosed, so the exact phishing vector, target brand, or credential‑capture technique remains unknown. Given the corroborating infrastructure and reputation signals, defensive teams should treat dhrubajp.com as a high‑risk phishing host. Recommended actions include adding the domain and its resolved IP address to blocklists at perimeter and endpoint layers, monitoring DNS queries for the listed name servers, and, where possible, redirecting traffic to a sinkhole for further telemetry. Continuous re‑assessment is advised in case additional malicious payloads are observed.