metronidazoleflagyl500mg[.]info

The domain metronidazoleflagyl500mg.info is currently classified as a high‑risk generic phishing site and remains active as of the assessment date. Infrastructure analysis shows the domain resolves to the IP address 3.71.180.249, which belongs to an AWS EC2 instance in the eu‑central‑1 region of Germany. The domain was registered on 21 April 2026 through Fewmoretaps OU operating as Trustname.com, and it uses a Let’s Encrypt R12 certificate; its authoritative name servers are zeus.trustname.com and ares.trustname.com. HTTP requests receive a 301 redirect and the page title returned is "DDoS-Guard", with the underlying technology also identified as DDoS‑Guard, suggesting the site may be protected by a DDoS mitigation service. VirusTotal scans have flagged the domain by four of ninety‑one security vendors, and it appears in a single AlienVault OTX pulse and one public blocklist; PhishDestroy has already blocked the domain. No content analysis is available, so the exact phishing payload or target is not confirmed. Defenders should add the domain to network deny lists, monitor DNS queries for the associated IP and name servers, and consider sinkholing traffic to prevent credential harvesting. Continuous re‑evaluation is advised to detect any changes in hosting, certificate, or page content that could affect threat posture.