farmaciaed[.]com

PhishDestroy identifies farmaciaed.com as an active crypto-draining phishing site masquerading as a legitimate online pharmacy. This fraudulent domain attempts to trick visitors into connecting their digital wallets under the pretense of purchasing discounted medications, then silently drains cryptocurrency through malicious smart-contract interactions. Users are prompted to sign wallet-connect requests or enter seed phrases, which are immediately harvested by the threat actors. All wallet connections should be treated as potentially compromised, and no further transactions should be authorized until a full wallet reset is completed on a clean device.

This domain was flagged by PhishDestroy after VirusTotal analysis confirmed detection by 1 out of 95 security vendors as of the April 07, 2025 creation date. Registry records show the domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, and is currently resolving to IP address 141.98.11.218. A Let's Encrypt SSL certificate was issued shortly after registration, adding false legitimacy to the site. It has since been added to 1 confirmed phishing blocklist and is actively blocked by PhishDestroy’s automated detection systems. The combination of recent creation, low detection rate, and clear malicious intent places this site at an elevated risk level.

If you visited farmaciaed.com or entered any wallet information, disconnect your wallet immediately and revoke any unauthorized permissions through your wallet’s settings or a reputable revocation tool such as revoke.cash. Do not approve any further transactions, even small ones. Reset your wallet on a secure, offline device and transfer remaining funds to a newly generated address. Run a full antivirus scan and monitor your accounts for suspicious activity. Always verify unfamiliar pharmacy domains against PhishDestroy’s blocklist before entering personal or financial information. When in doubt, use well-known, licensed pharmacies.