rxpharmacycanada[.]com

Analysis of rxpharmacycanada.com shows a newly registered domain (creation date April 21, 2026) hosted on an AWS EC2 instance in the eu-central-1 region (IP 3.71.180.249, Germany). The domain is registered through Fewmoretaps OU d/b/a Trustname.com and uses the Trustname.com nameservers ares.trustname.com and zeus.trustname.com. TLS is provided by a Let’s Encrypt certificate (R13), but the web server returns HTTP 403 for all requests, and the only visible page title is "DDoS-Guard," which does not correspond to the pharmacy theme implied by the domain name. The domain appears on one security blocklist and is actively blocked by PhishDestroy. Threat intelligence from AlienVault OTX references the domain in a single pulse, and VirusTotal reports four detections out of ninety‑four scanners, while Gridinsoft assigns a trust score of 0/100. These indicators collectively suggest the site is being used for malicious phishing activity, although the exact payload and target audience remain unknown due to the 403 response. Defenders should add rxpharmacycanada.com to URL and DNS blocklists, monitor the associated IP address for outbound connections, and consider TLS inspection to reveal any hidden content. Ongoing observation of the domain’s DNS records and any changes in the detection landscape is recommended to determine whether the infrastructure evolves or expands.