purchasedoxycycline[.]info

The domain purchasedoxycycline.info was registered on 21 April 2026 and currently resolves to the IPv4 address 3.71.180.249 hosted on an AWS EC2 instance in the eu-central-1 region (Germany). DNS resolution uses the authoritative name servers zeus.trustname.com and ares.trustname.com, both associated with the registrar Fewmoretaps OU d/b/a Trustname.com. The web server returns an HTTP 301 redirect and presents a TLS certificate issued by Let’s Encrypt (R13). The page title reported by scanners is “DDoS-Guard”, which does not match any known banking brand and suggests the site may be a placeholder or redirect page. The domain appears on a single security blocklist and has been flagged by PhishDestroy; an AlienVault OTX pulse also references it. Gridinsoft assigns a trust score of 0 / 100. No malware detections have been reported by the 94 AV engines that scanned the site, but the absence of detections does not confirm benign intent. The infrastructure—AWS hosting, generic TLS certificate, and low trust score—matches patterns observed in recent banking‑phishing campaigns that leverage fast‑provisioned cloud resources. Defenders should add the domain to URL filtering and DNS block lists, monitor for any new redirects or payloads, and treat any credential‑capture attempts originating from this host as high‑risk. Continuous re‑scanning is advised to capture any post‑deployment changes.