doxycycline100mgonline[.]org

The domain doxycycline100mgonline.org was created on April 21, 2026, and has been flagged as a high-risk generic phishing site. This domain is still active as of July 12, 2026, and is hosted on an AWS EC2 server located in Germany (eu-central-1). The domain’s registration is managed through Fewmoretaps OU d/b/a Trustname.com, which has a poor reputation, as indicated by a Gridinsoft trust score of 0/100. The domain also appears on at least one security blocklist, further underscoring its potential threat. Analysis indicates that the domain redirects users with an HTTP status code 301, likely pointing to another location or page, and the page title returned is 'DDoS-Guard'. This suggests that the domain may be using DDoS protection services to evade detection or to enhance its resilience against takedown efforts. The SSL certificate for doxycycline100mgonline.org is issued by Let's Encrypt, which is a common practice for phishing sites to gain user trust by displaying a secure connection. One security vendor out of 95 has flagged this domain on VirusTotal, indicating some level of suspicious activity, though the low number of detections could be due to the site’s relatively new status or sophisticated evasion techniques. Defenders should monitor this domain closely, as its high risk level and ongoing activity suggest that it poses a significant threat to potential victims. Additional investigation into the domain’s redirect target and related infrastructure is recommended to better understand the scope of the phishing campaign and to identify any associated malicious activities. Organizations should consider implementing stricter domain monitoring and user education programs to prevent accidental visits to this domain and to recognize the signs of phishing attacks.