drughub[.]guru

The domain drughub.guru was registered on June 08 2026 via the Spaceship, Inc. registrar and is presently hosted behind Cloudflare’s network (IP 172.67.209.115, CA). The site delivers an HTTP 200 response and utilizes Cloudflare Browser Insights, HTTP/3, and a Google Trust Services WE1 TLS certificate. The page title returned by the server is “DrugHub Market Trust,” which aligns with the generic_phishing classification. VirusTotal scans show five of ninety‑one AV engines flag the domain, and it appears on a single public blocklist. AlienVault OTX has referenced the domain in four separate threat‑intel pulses, and PhishDestroy lists it as blocked. Gridinsoft assigns a trust score of 0 / 100, indicating a high likelihood of malicious use. The infrastructure suggests a typical phishing hosting pattern, but the specific payload, target audience, or compromised credentials have not been publicly disclosed. Defenders should add drughub.guru to network‑level deny lists, enforce DNS sink‑holing, and monitor outbound traffic for connections to the Cloudflare IP range. Continuous re‑scanning with multi‑engine scanners is advised to capture any emerging indicators, and any observed credential‑theft attempts should be investigated as part of incident response.