# n1canadianpharmacy.com — MALICIOUS

> n1canadianpharmacy.com engages in credential theft, flagged by 7 of 95 VirusTotal vendors. Users should avoid this site to protect their data.

## Summary
The domain n1canadianpharmacy.com is currently active and engaged in credential theft efforts. This type of threat specifically targets users' login information, increasing the risk of account compromise. No well-known brand impersonation has been identified for this domain, but the risk remains elevated due to its malicious intent.

Technical analysis reveals that n1canadianpharmacy.com was created recently on April 7, 2025, and is registered via NICENIC INTERNATIONAL GROUP CO., LIMITED. The domain uses an SSL certificate issued by Let's Encrypt, which may contribute to a false sense of security for unsuspecting users. It resolves to the IP address 141.98.11.218. VirusTotal scans indicate that 7 out of 95 security vendors flag this domain as malicious, confirming a consensus on its threat. There is no mention of blocklist counts or trust scores at this time.

Given its active status and the clear risk of credential theft, it is strongly recommended that users and organizations block access to n1canadianpharmacy.com. Security teams should monitor for any attempts to access this domain from their networks and alert users about the potential dangers. Preventative measures such as updating endpoint protection systems and educating personnel on recognizing credential theft attempts are crucial to mitigate potential damage.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-04-07 10:39:07
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 141.98.11.218

## Detection Status
- VirusTotal: 7 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/3cfca2a8-6295-4374-ab73-4acec6cc3cb0
- PhishDestroy: https://phishdestroy.io/domain/n1canadianpharmacy.com/
- LLM endpoint: https://phishdestroy.io/domain/n1canadianpharmacy.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/n1canadianpharmacy.com/
Last updated: 2026-03-27