100mg-hyclate-doxycycline[.]org

The domain 100mg-hyclate-doxycycline.org was registered on April 24, 2026 through Fewmoretaps OU d/b/a Trustname.com. DNS resolves to 3.71.180.249, an AWS EC2 instance in the Frankfurt region (DE). Nameservers zeus.trustname.com and ares.trustname.com are tied to the same registrar, a pattern often seen in rapidly provisioned malicious infrastructure. The site returns an HTTP 403 status and presents a Let’s Encrypt certificate (R13), offering no assurance of legitimacy. The only visible page title is “DDoS-Guard,” a generic label that does not clarify the site’s purpose. The domain appears on one security blocklist, is referenced in an AlienVault OTX pulse, and is actively blocked by PhishDestroy, indicating prior detection as a phishing vector. VirusTotal reports 3 of 94 security vendors flagging the domain, and Gridinsoft assigns a trust score of 0/100, both reinforcing a high‑risk assessment. No additional malware kits or specific phishing templates have been identified, and the page content beyond the title has not been analyzed. Defenders should block the domain and its associated IP address, monitor DNS queries to the listed nameservers, and consider sink‑holing the IP to disrupt potential campaigns. Ongoing traffic analysis and periodic rescans are recommended to track any changes in the threat profile.