pharmacomlabs[.]com

Analysis indicates that pharmacomlabs.com resolves to the Cloudflare‑hosted address 172.67.167.45. The domain is registered through CNOBIN INFORMATION TECHNOLOGY LIMITED and uses Cloudflare nameservers abby.ns.cloudflare.com and damon.ns.cloudflare.com. Creation date is recorded as 20 December 2009, suggesting a long‑standing registration, but the recent classification as a generic phishing site shows that the infrastructure is being leveraged for malicious purposes. The domain appears on a single security blocklist and is actively blocked by the PhishDestroy feed, confirming that at least one reputable phishing‑tracking service has identified it as malicious.

VirusTotal has recorded scans from 91 antivirus and URL‑reputation engines; none of the engines raised a detection at the time of scanning, which underscores the limitation of signature‑based tools against this type of threat. No public Safe Browsing, OTX, SSL certificate, HTTP response code, or trust‑score data is available in the current intelligence set, and the page title has not been captured, leaving open the possibility that the site may host dynamic or rapidly changing phishing content. Defenders should therefore treat the domain as hostile: add 172.67.167.45 to network‑level deny lists, enforce URL filtering for the full domain, and monitor for any outbound connections to the associated Cloudflare nameservers.

Continuous re‑scanning with multi‑engine services is advised, as the lack of detections does not guarantee safety. Logging of DNS queries for pharmacomlabs.com and correlating them with user activity can help identify compromised endpoints. Because the domain is still marked active, any detection of traffic to or from the address should trigger incident response procedures, including isolation of affected hosts and forensic analysis of potential credential harvest.