gahmspharmacy[.]com

This domain, gahmspharmacy.com, is flagged as a generic phishing threat with a high risk level. It was registered on July 30, 2025, through the registrar Fewmoretaps OU, operating as Trustname.com. The domain is currently active and resolves to the IP address 3.71.180.249, hosted on an AWS EC2 instance in the eu-central-1 region (Germany). The SSL certificate is issued by Let's Encrypt (R13). The page title is 'DDoS-Guard', which typically indicates the presence of a DDoS protection service rather than the actual content of the phishing page. The domain is blocked by PhishDestroy and appears on one security blocklist. VirusTotal data shows 4 out of 91 security vendors flagging this domain, and it is present in one AlienVault OTX threat intelligence pulse. The Gridinsoft trust score is 0/100, reflecting a high level of distrust. The exact nature of the phishing content has not been analyzed; no brand or specific scam type is identified beyond the generic phishing classification. Defenders should block access to this domain and its associated IP address (3.71.180.249) at network and email gateways. Monitor for any variations or related domains registered through the same registrar or hosted on the same IP range. Given the active status and low trust score, users who may have interacted with this domain should be alerted to potential credential compromise or data theft.