onlinedoxycycline[.]info

onlinedoxycycline.info was registered on 2026-04-21 through Fewmoretaps OU d/b/a Trustname.com and uses the authoritative name servers zeus.trustname.com and ares.trustname.com. The site presents a TLS certificate issued by Let’s Encrypt (R13) and returns HTTP 403 for the default request. DNS resolves to 3.71.180.249, an AWS EC2 instance in the eu‑central‑1 region of Germany. The domain appears on a single public blocklist and is currently listed by PhishDestroy; AlienVault OTX has referenced it in one pulse. Four of ninety‑one VirusTotal scanners flagged the domain, and Gridinsoft assigns a trust score of 0 / 100. The page title reported by the crawler is “DDoS‑Guard”, which does not reveal the intended victim or payload. The threat classification is generic_phishing with a high risk rating and the status remains active. Defenders should immediately deny outbound connections to 3.71.180.249, add the domain to internal block lists, and monitor for any credential‑harvesting activity that may reference the domain. Continuous re‑scanning is advised to capture any changes in the payload or hosting infrastructure.