iivermectin[.]com

This domain, iivermectin.com, is identified as a credential theft operation targeting individuals seeking pharmaceutical products. The site mimics legitimate medication suppliers, tricking visitors into entering sensitive personal and financial information under the guise of purchasing medical treatments. Such schemes often lead to unauthorized account access, financial fraud, or identity theft, with victims unaware until transactions or breaches occur. Analysis indicates the domain was registered on April 28, 2026, through Fewmoretaps OU d/b/a Trustname.com, a registrar frequently associated with low-reputation domains. Infrastructure analysis reveals the site resolves to IP address 3.71.180.249 and employs DDoS-Guard for protection, a service commonly used to obscure malicious infrastructure. VirusTotal reports 4 out of 95 security vendors flagging the domain as malicious, while Scamadviser and Gridinsoft assign trust scores of 1/100 and 0/100, respectively. The SSL certificate is issued by Let's Encrypt, a neutral provider, but the combination of low trust scores and blocklist presence confirms its malicious intent. If you visited iivermectin.com or entered any information on the site, immediate action is required. First, disconnect the affected device from the network to prevent potential malware execution or data exfiltration. Run a full system scan using updated security tools to detect and remove any malicious payloads. Next, change passwords for all accounts accessed from the device, prioritizing financial, email, and healthcare portals, and enable multi-factor authentication where available. Monitor bank statements and credit reports for unauthorized transactions, and consider placing a fraud alert with credit bureaus. Report the incident to relevant authorities, such as the Federal Trade Commission or local cybercrime units, to assist in tracking and mitigating the threat.