johnnyivermectinseed[.]com

The domain johnnyivermectinseed.com is assessed as having an elevated risk level, specifically identified as a generic phishing site. This domain impersonates legitimate DDoS-Guard services, potentially misleading users and posing a significant threat to security and data integrity.

Analysis indicates that this domain is flagged by 3 out of 95 security vendors on VirusTotal, suggesting a relatively low but notable level of suspicion. The domain is registered through Fewmoretaps OU d/b/a Trustname.com and resolves to the IP address 3.71.180.249. It was created on July 28, 2025, which is a recent registration date that can be indicative of malicious intent. The domain appears on one security blocklist and has a Scamadviser trust score of 35/100, indicating a moderate level of distrust. Additionally, it has a Gridinsoft trust score of 0/100, which is the lowest possible score, further emphasizing the domain's untrustworthiness. The SSL certificate is issued by Let's Encrypt, a common choice for both legitimate and malicious sites. The domain is also mentioned in one threat intelligence pulse on AlienVault OTX and is blocked by PhishDestroy.

To mitigate the risks associated with this generic phishing site, users should exercise caution when encountering links or emails directing them to johnnyivermectinseed.com. It is recommended to verify the legitimacy of any communications claiming to be from DDoS-Guard through official channels. Network administrators should consider adding 3.71.180.249 to their firewall blocklists and monitor for any attempts to access this domain. Additionally, implementing robust phishing detection and user education programs can help in identifying and preventing such attacks. Regularly updating security software and maintaining a vigilant approach to online security are crucial steps in safeguarding against phishing threats.