generic-finasteride-propecia[.]com

The domain generic-finasteride-propecia.com was registered on 21 April 2026 and is currently hosted on an Amazon Web Services EC2 instance in the eu-central-1 region (Germany). DNS resolution points to the IPv4 address 3.71.180.249, which geo-locates to DE. The authoritative nameservers ares.trustname.com and zeus.trustname.com belong to the registrar Fewmoretaps OU operating under the trade name Trustname.com. Network probing returns HTTP 403, indicating that the web server is deliberately denying unauthenticated requests, a behavior often employed by malicious landing pages that serve content only after specific parameters are supplied. The site presents a valid Let’s Encrypt R12 certificate, which masks the underlying threat by providing encryption and a trusted certificate chain. Reputation services flag the domain as high-risk. Gridinsoft assigns a trust score of 0 / 100, and the domain appears on one security blocklist. VirusTotal analysis shows that 1 of 95 scanned engines flagged the host, and the domain is referenced in a single AlienVault OTX pulse. PhishDestroy has already listed the domain as blocked, confirming active phishing use. Given the recent creation date, active status, and the combination of a low trust score, blocklist presence, and confirmed phishing block, defenders should treat generic-finasteride-propecia.com as a malicious infrastructure component. Recommended mitigations include adding the domain and its IP address to perimeter blocklists, configuring DNS sinkholing for the associated nameservers, and monitoring for any outbound connections to the 3.71.180.249 host. Continuous re-evaluation is advised as additional threat intelligence may emerge.