Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@gen.xyz.
The latest stored availability evidence still shows the domain reachable; 17 days has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
drughub-market-link[.]icu
“DrugHub Market | Official Onion Links & Verified Mirrors 2026”
drughub-market-link.icu — No verificado. Resumen de las pruebas: VirusTotal 8/91 (alphaMountain.ai, Chong Lua Dao, Forcepoint ThreatSeeker, Fortinet, Gridinsoft); Spamhaus DBL_SPAM; PhishDestroy score 83/100. Registrador: NiceNIC.
El análisis detallado de PhishDestroy AI se mantiene en inglés para conservar el registro forense original.
The domain drughub-market-link.icu is currently classified as a generic phishing threat and remains active as of the report date, August 03, 2026. Intelligence indicates the domain appears on a single security blocklist and is explicitly blocked by the PhishDestroy service, confirming that at least one reputable anti‑phishing provider has taken mitigating action. VirusTotal records show the domain has been examined by 91 scanning engines, none of which have raised a detection at the time of analysis; this lack of detections is noted but does not constitute evidence of benign intent.
No additional data such as registrar information, IP address, autonomous system number, hosting location, SSL certificate details, HTTP response codes, or Safe Browsing status is available in the current intelligence set. Consequently, the infrastructure behind the domain cannot be profiled, and the exact phishing payload or targeted brand remains undefined. Defenders should treat the domain as malicious based on its blocklist presence and the explicit block by PhishDestroy.
Recommended actions include adding the domain to network‑level deny lists, updating endpoint security policies to block any URLs containing the domain, and monitoring DNS queries for related look‑alike patterns. Continuous re‑evaluation is advised, as future scans or additional threat‑intel feeds may reveal further indicators of compromise or attribution.
Inteligencia de seguridad de red Registrar context
Proceso de respuesta ante amenazas Pipeline
Estado de la lista de bloqueados pública
Captura guardada
Inteligencia de dominios
Detalles técnicosDNS, SAN de SSL, marcas de tiempo
ZONA SHORTDOT · PRUEBAS PÚBLICAS
.icu
ShortDot zone evidence
ShortDot zone evidence
The linked repository preserves daily zone observations across seven ShortDot-operated TLDs, including registration volume and abuse-related indicators. This registry context is supporting background and is not an independent detection for the domain in this report.
ICANN OVERSIGHT
Acreditación y contexto RAA
Acreditación y contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Latest Classified Outcome 2026-08-20 02:40:15 UTC
Tecnologías · 4 identified
HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org 100 % de confianzaCloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.
www.cloudflare.com 100 % de confianzaCloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 100 % de confianzaHTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 100 % de confianzaAnálisis de VirusTotal
Evidencias archivadas
Análisis del rendimiento del sitio
Google PageSpeed Insights — mobile performance audit of drughub-market-link.icu · checked Aug 3, 2026
Análisis de la configuración del sitio
Datos y informes externos
PD-20260803-B01A36 Recipient: abuse@gen.xyz ¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.