drugon3[.]biz

The domain drugon3.biz was registered on October 17, 2023 through NiceNIC International Group Co., Limited and is currently taken offline. DNS resolution points to IP address 91.206.71.169, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the Netherlands. The domain uses Cloudflare nameservers (david.ns.cloudflare.com and dina.ns.cloudflare.com) and presents a Google Trust Services / WE1 SSL certificate, indicating a valid TLS handshake but offering no assurance of legitimacy. The page title observed during scanning is "Вы не робот?" ("You are not a robot?") but no further content analysis is available.

Reputation signals are strongly negative: Gridinsoft assigns a trust score of 0 out of 100, the domain appears on one security blocklist, and PhishDestroy has actively blocked it. AlienVault OTX reports the domain in three separate threat intelligence pulses, reinforcing its association with malicious activity. VirusTotal analysis shows that five of ninety‑three security vendors flagged the domain, confirming the presence of at least some detection signatures.

No additional evidence such as specific brand impersonation or payload details is provided. Defenders should update URL filtering and DNS blocklists to include drugon3.biz, monitor for any residual traffic to its Cloudflare IP, and enforce TLS inspection to capture any future content if the site reappears. Given the low trust score, multiple vendor detections, and blocklist listings, the domain should be treated as high‑confidence malicious and excluded from user access paths.