onlinepharmacentre[.]com

The domain onlinepharmacentre.com has been identified as a generic phishing site designed to mimic a legitimate online pharmacy storefront. Analysis indicates the domain is currently offline, though prior activity suggests it was actively used to deceive users into submitting personal and financial information under the guise of pharmaceutical sales. No specific brand impersonation has been confirmed, but the site follows patterns consistent with fraudulent e-commerce platforms targeting healthcare consumers. Technical indicators reveal the domain was registered on March 27, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with high-risk domains. It resolved to the IP address 141.98.11.218, which has been linked to other malicious infrastructure. The domain holds a Gridinsoft trust score of 0/100, reflecting its confirmed malicious status. VirusTotal reports that 6 of 95 security vendors flagged the domain as malicious, while AlienVault OTX lists it in one threat intelligence pulse. Additionally, the domain appears on one security blocklist and was blocked by PhishDestroy, further corroborating its fraudulent nature. Current status confirms the domain has been taken offline, though the underlying infrastructure may remain accessible for future malicious campaigns. Organizations are advised to block the domain and its associated IP (141.98.11.218) at the perimeter level, including firewalls and DNS filters. Security teams should monitor for any re-registration attempts or shifts in hosting providers, as domains of this nature often resurface under altered names. End-users who may have interacted with the site should be instructed to reset credentials, particularly if payment information was submitted, and to scan affected systems for malware. Proactive threat hunting for related indicators of compromise is recommended to mitigate residual risk.