# canadianppharmacy.com — SUSPICIOUS

> PhishDestroy identifies CanadianPPharmacy.com as an active pharmacy scam domain flagged by 3 of 95 VirusTotal vendors. Check the full report.

## Summary
PhishDestroy identifies canadianppharmacy.com as an active pharmacy scam impersonating legitimate Canadian pharmacies to peddle counterfeit medications. The domain is classified under the specific threat type generic_phishing and remains active as of the latest threat intelligence updates.

This domain was flagged by 3 of 95 VirusTotal security vendors, indicating elevated risk levels. The domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on January 20, 2022, and resolves to IP address 185.114.96.3. The domain utilizes a Google Trust Services SSL certificate, further complicating detection for unsuspecting users.

The domain poses an ongoing threat due to its active status and the use of trusted SSL certificates to appear legitimate. PhishDestroy recommends users exercise extreme caution when encountering this domain or advertisements promoting canadianppharmacy.com. Immediate action should include blocking access to the domain at the network level and reporting the threat to relevant cybersecurity authorities. Users who may have interacted with this domain should monitor financial accounts for suspicious transactions and consider resetting passwords if any credentials were entered. Organizations are advised to update threat intelligence feeds to include this domain and conduct employee awareness training to prevent potential infections.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2022-01-20 12:42:22
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 3 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/52380864-a6ed-4862-92ee-d4fe7d76147a
- PhishDestroy: https://phishdestroy.io/domain/canadianppharmacy.com/
- LLM endpoint: https://phishdestroy.io/domain/canadianppharmacy.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/canadianppharmacy.com/
Last updated: 2026-03-27