zithromaxbuyazithromycin[.]org

The domain zithromaxbuyazithromycin.org has been identified as a generic phishing threat, with no specific brand impersonation or drainer kit detected. It was registered through Fewmoretaps OU d/b/a Trustname.com and created on April 21, 2026, which is notably in the future, suggesting possible data anomalies or manipulation. The domain resolves to IP address 3.71.180.249 and its SSL certificate was issued by Let's Encrypt (R13). The page title observed was "DDoS-Guard," which may indicate the site was protected by a DDoS mitigation service.

Technical indicators reveal that VirusTotal flagged this domain with a score of 2 out of 95 security vendors, meaning only a small fraction of security solutions currently detect it as malicious. It appears on one security blocklist and was found in one AlienVault OTX threat intelligence pulse. Google Safe Browsing status was not explicitly provided, but given the blocklist presence, it is likely not considered safe. The SSL certificate and registration details suggest an attempt to appear legitimate, but the future creation date raises red flags.

Currently, the domain is offline, having been taken down. The risk level remains elevated due to its phishing nature and low detection rate. PhishDestroy advises users to avoid visiting this domain and to verify any communications referencing it. While the immediate threat is mitigated by its offline status, similar domains may appear, and users should remain vigilant against unsolicited offers for medications like azithromycin. Always verify the legitimacy of online pharmacies through trusted sources.