drug-hub-darknet[.]com
“DrugHub Official Links 2026 | Verified Market URL”
drug-hub-darknet.com — Belum terverifikasi. Ringkasan bukti: VirusTotal 3/95 (Fortinet, Gridinsoft, SOCRadar); Spamhaus DBL_PHISH; PhishDestroy score 65/100. Registrar: NiceNIC.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
On July 24, 2026 investigators observed that the domain drug-hub-darknet.com was registered on 22 February 2026 through NiceNIC International Group Co., Limited. The authoritative name servers elly.ns.cloudflare.com and neil.ns.cloudflare.com resolve the domain to the Cloudflare edge address 104.21.9.148, which is associated with AS13335 Cloudflare, Inc. in the United States. No TLS certificate is presented for the site, indicating that HTTPS is not configured. The page title returned from the HTTP response reads “DrugHub Official Links 2026 | Verified Market URL”, suggesting an attempt to present itself as a legitimate “DrugHub” marketplace.
The domain is currently listed as offline, and it has been added to a single security blocklist, specifically PhishDestroy. VirusTotal analysis shows that three of ninety‑five security vendors flagged the domain, providing additional corroboration of malicious intent. The lack of a certificate, the recent registration date, and the use of Cloudflare’s shared infrastructure are consistent with typical abuse patterns for short‑lived phishing infrastructure.
However, no further public telemetry such as Safe Browsing, OTX, or additional blocklist entries are available, leaving the full scope of distribution unknown. Defenders should continue to block the domain at network perimeter and DNS layers, monitor for any resurgence of the same IP address or name‑server pair, and consider adding the domain to internal blacklist feeds. Because the site is offline, any active credential‑harvesting capability is presently unavailable, but the infrastructure may be re‑used for future campaigns, so ongoing vigilance is recommended.
Intelijen Keamanan Jaringan Registrar context
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Latest Classified Outcome 2026-08-19 02:59:13 UTC
Analisis VirusTotal
Bukti Terarsip
Bukti & Laporan Eksternal
PD-20260222-D52A7A Recipient: abuse@nicenic.net, abuse@verisign-grs.com, compliance@icann.org Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive