canadianpharmacydrug[.]com

The domain canadianpharmacydrug.com is assessed as having an elevated risk level and is identified as a generic phishing site. The domain poses a significant threat to users who may inadvertently visit it, potentially leading to the compromise of personal and financial information.

Infrastructure analysis reveals that the domain was created on March 27, 2026, and is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. The domain resolves to the IP address 195.42.103.46. According to VirusTotal, 4 out of 95 security vendors flag this domain as malicious, indicating a moderate level of detection among security tools. The domain has a ScamAdviser trust score of 1/100 and a Gridinsoft trust score of 0/100, both of which are extremely low and suggest a high level of distrust. Additionally, the domain appears on 1 security blocklist and has been included in 1 threat intelligence pulse on AlienVault OTX. The SSL certificate is issued by Let's Encrypt, which is a common choice for malicious actors due to its ease of acquisition. The domain has been taken offline, but the risk remains if it is reactivated or if users have already been exposed.

To mitigate the risks associated with this generic phishing domain, users are advised to avoid clicking on any links or entering personal information on any pages associated with canadianpharmacydrug.com. Security teams should block the IP address 195.42.103.46 and monitor network traffic for any attempts to access the domain. Regularly updating security software and educating users about the signs of phishing attacks can also help prevent potential compromises. It is important to remain vigilant, as the domain could be reactivated or used in similar campaigns in the future.