ivermectin-uk-buy[.]com

This domain, ivermectin-uk-buy.com, is flagged as a high-risk brand impersonation phishing site. The domain name mimics legitimate UK pharmacy sources for ivermectin, indicating a likely campaign to harvest personal and financial information from users seeking medication. No specific drainer kit was identified, but the threat type is consistent with credential theft and payment fraud targeting unsuspecting buyers.

Technical indicators reveal a VirusTotal detection score of 2 out of 95 security vendors, confirming malicious associations. The domain is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar known for hosting low-reputation domains. It resolves to IP address 192.250.227.30 and was created on June 15, 2026. The domain features a generic 'My Blog' page title and uses a Let's Encrypt SSL certificate, which provides no trust validation. Google Safe Browsing status is not explicitly provided, but the active threat status and blocklist presence indicate a high risk.

As of the current date, the domain remains active and accessible, posing an ongoing risk to users. Recommended response actions include immediate domain blocklisting on security gateways, email filtering rules to prevent link delivery, and user awareness alerts about medication-related phishing. Remaining risk is elevated due to the active status and the potential for data theft or financial loss. Users who have interacted with this site should change passwords and monitor accounts for unauthorized activity.