modafinilxp[.]net

This domain, modafinilxp.net, is identified as a generic phishing site specializing in fraudulent pharmaceutical sales. Analysis indicates the domain was designed to mimic legitimate online pharmacies, likely targeting users seeking prescription medications without proper verification. No specific brand impersonation or drainer kit signatures were detected, but the site follows common patterns of rogue pharmacy scams, including fake product listings and payment interception mechanisms. Infrastructure analysis reveals modafinilxp.net was registered through Fewmoretaps OU d/b/a Trustname.com on April 24, 2026, with an SSL certificate issued by Sectigo Limited. The domain resolves to IP address 162.241.85.228, which has been associated with other low-reputation hosting providers. VirusTotal detection shows 1/95 security vendors flagging the domain, while it appears on 2 security blocklists and is referenced in 1 AlienVault OTX threat intelligence pulse. Gridinsoft trust score is 0/100, and the domain is actively blocked by PhishDestroy and OISD. Current status indicates modafinilxp.net has been taken offline, likely due to hosting provider intervention or registrar suspension. While the immediate threat is mitigated, residual risk remains from potential credential harvesting or financial data collected during its operational period. Users who interacted with the domain should monitor financial statements for unauthorized transactions and reset any credentials entered on the site. Organizations are advised to update blocklists with the domain and associated IP address to prevent future access attempts.