drughub-market[.]store

The domain drughub-market.store is a generic phishing site designed to deceive users into disclosing sensitive information such as login credentials or personal data. It does not impersonate a specific brand or employ a known crypto drainer kit. As of the latest verification, drughub-market.store has been taken offline, but its prior activity poses an elevated risk to individuals who may have interacted with it.

Technical analysis reveals that drughub-market.store was flagged by 2 of 95 VirusTotal security vendors, including Fortinet and SOCRadar, while appearing on 1 security blocklist (PhishDestroy). The domain was registered through NiceNIC International Group Co., Limited on February 24, 2026, and resolved to the IP address 176.116.0.112, hosted by ALEXHOST SRL in the Netherlands. It used an SSL certificate issued by Let's Encrypt (R13) and employed technologies such as Three.js, Nginx, Cloudflare, jsDelivr, and cdnjs. The observed page title was identical to the domain name, drughub-market.store, and it utilized nameservers ns3.my-ndns.com and ns4.my-ndns.com.

Individuals who visited drughub-market.store should immediately change any passwords or credentials entered on the site, enable two-factor authentication (2FA) on associated accounts, and monitor for unauthorized activity or fraud. Victims are advised to report the phishing domain to their email provider, browser security teams, and platforms like Google Safe Browsing or the Anti-Phishing Working Group (APWG) to aid in broader mitigation efforts.