# canadianpharmacyr.com — SUSPICIOUS

> Beware: canadianpharmacyr.com is a fake online pharmacy phishing scam stealing credentials. Verified by PhishDestroy. SSL cert issued by Google Trust Services.

## Summary
PhishDestroy identifies canadianpharmacyr.com as a fraudulent online pharmacy domain actively engaged in phishing scams, primarily targeting individuals seeking discounted medications. Based on the most recent intelligence, this domain has been classified as a high-risk threat under active investigation due to its deceptive nature and potential for credential theft. The site masquerades as a legitimate pharmacy, luring victims with unrealistically low drug prices to harvest personal and financial information. Users attempting to make purchases or sign up for accounts may unknowingly expose sensitive data such as login credentials, payment details, or even personal identification, which are then exploited for fraudulent transactions or sold on dark web marketplaces.


This domain was flagged exclusively by PhishDestroy and remains undetected by 95 leading security vendors on VirusTotal as of the latest scan, indicating a low initial detection rate despite its malicious intent. Domain registration records show that canadianpharmacyr.com was created on August 26, 2023, and is currently hosted on IP address 188.114.96.3. The SSL certificate securing the site is issued by Google Trust Services, which alone does not guarantee legitimacy. Registration was processed through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar known for processing domains with irregular or deceptive registration patterns. Notably, the domain carries a high-risk profile due to its recent creation, low detection score, use of a trusted SSL issuer, and absence from major threat intelligence feeds. While the domain does not currently appear on public blocklists, its behavioral patterns strongly suggest imminent inclusion as investigations progress.


To mitigate risk, PhishDestroy strongly advises users to avoid accessing canadianpharmacyr.com entirely. If you have already visited the site, refrain from entering any personal information, credentials, or payment details. Review all financial accounts for unauthorized transactions and consider resetting passwords if you used the same credentials elsewhere. Always verify pharmacy websites by checking for certification from recognized bodies such as the Canadian International Pharmacy Association (CIPA) or LegitScript. Use reputable secure payment methods with purchase protection when buying medications online. Finally, report suspicious domains to PhishDestroy and local cybersecurity authorities to help block future access and protect others from falling victim to this scam.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2023-08-26 09:31:41
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/1785577c-9cbb-4cee-9e67-dce3f40724fd
- PhishDestroy: https://phishdestroy.io/domain/canadianpharmacyr.com/
- LLM endpoint: https://phishdestroy.io/domain/canadianpharmacyr.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/canadianpharmacyr.com/
Last updated: 2026-03-27