# farmaciaed.com — SUSPICIOUS

> PhishDestroy warns that farmaciaed.com is a fake pharmacy crypto drainer detected by 1/95 VirusTotal engines since April 07, 2025. Do not enter wallet details.

## Summary
PhishDestroy identifies farmaciaed.com as an active crypto-draining phishing site masquerading as a legitimate online pharmacy. This fraudulent domain attempts to trick visitors into connecting their digital wallets under the pretense of purchasing discounted medications, then silently drains cryptocurrency through malicious smart-contract interactions. Users are prompted to sign wallet-connect requests or enter seed phrases, which are immediately harvested by the threat actors. All wallet connections should be treated as potentially compromised, and no further transactions should be authorized until a full wallet reset is completed on a clean device. 


This domain was flagged by PhishDestroy after VirusTotal analysis confirmed detection by 1 out of 95 security vendors as of the April 07, 2025 creation date. Registry records show the domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, and is currently resolving to IP address 141.98.11.218. A Let's Encrypt SSL certificate was issued shortly after registration, adding false legitimacy to the site. It has since been added to 1 confirmed phishing blocklist and is actively blocked by PhishDestroy’s automated detection systems. The combination of recent creation, low detection rate, and clear malicious intent places this site at an elevated risk level. 


If you visited farmaciaed.com or entered any wallet information, disconnect your wallet immediately and revoke any unauthorized permissions through your wallet’s settings or a reputable revocation tool such as revoke.cash. Do not approve any further transactions, even small ones. Reset your wallet on a secure, offline device and transfer remaining funds to a newly generated address. Run a full antivirus scan and monitor your accounts for suspicious activity. Always verify unfamiliar pharmacy domains against PhishDestroy’s blocklist before entering personal or financial information. When in doubt, use well-known, licensed pharmacies.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-04-07 11:12:31
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 141.98.11.218

## Detection Status
- VirusTotal: 1 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/e6076b04-f1af-43b6-b04f-5fd5b2393faa
- PhishDestroy: https://phishdestroy.io/domain/farmaciaed.com/
- LLM endpoint: https://phishdestroy.io/domain/farmaciaed.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/farmaciaed.com/
Last updated: 2026-03-27