azithromycinzithromax250mg[.]com

The domain azithromycinzithromax250mg.com was registered on April 21 2026 through Fewmoretaps OU d/b/a Trustname.com. The authoritative name servers ares.trustname.com and zeus.trustname.com resolve the domain to the IPv4 address 3.71.180.249, an Amazon Web Services EC2 instance in the eu‑central‑1 region (Germany). The certificate presented is a Let’s Encrypt R12 certificate, indicating automated issuance. The domain is currently returning HTTP 403 responses, but the presence of the certificate and active host suggest the site remains reachable.

The domain appears on a single security blocklist and has been flagged by PhishDestroy. VirusTotal reports that 7 of 95 scanned security vendors have flagged the domain, reflecting a modest but non‑trivial detection rate. Gridinsoft assigns a trust score of 0 out of 100, reinforcing the malicious assessment.

Infrastructure analysis points to a typical phishing staging environment: rapid registration, inexpensive cloud hosting, and generic SSL provisioning. The use of the Trustname.com brand in the registrar and name server labels is consistent with other observed malicious campaigns that leverage seemingly legitimate corporate naming to obscure intent. The low trust score and multiple vendor detections align with the threat type labeled as generic_phishing, and the high risk rating is justified by the combination of recent creation, active hosting, and early detection.

Defenders should block any network traffic to 3.71.180.249 and add azithromycinzithromax250mg.com to local deny lists. Email filters should be configured to flag messages containing URLs that match the domain or its sub‑domains. Continuous monitoring of the associated IP range for further malicious activity is advised, as the attacker may pivot to additional domains hosted on the same AWS account. While the current HTTP response is 403, the underlying host may serve malicious payloads if the request vector changes, so proactive containment is recommended.