lifemedspharmacy[.]uk

lifemedspharmacy.uk operates as a generic phishing domain posing an elevated risk to users by attempting to harvest credentials through deceptive means. No specific brand is impersonated and no drainer kit is associated. The site has been taken offline.

Analysis shows detection by 2 of 95 VirusTotal vendors including CRDF and SOCRadar while it remains unflagged by Google Safe Browsing. The registrar is Internet Domain Services BS Corp t/a Internet.bs [Tag = IDS-BS] with a creation date of 2023-05-18 00:00:00. The domain resolves to the IP address 198.251.81.188 in the US under AS53667 FranTech Solutions and is listed on 1 blocklist PhishDestroy. Its SSL certificate is issued by Let's Encrypt / R13 and the page title observed is Life Meds Pharmacy | Leading UK Registered. Technologies detected include WordPress MySQL PHP LiteSpeed Slider Revolution jQuery Migrate jQuery JivoChat along with nameservers ns17.asurahosting.com ns17.my-control-panel.com ns18.asurahosting.com ns18.my-co.

For those exposed to this generic phishing scam users should change passwords used on the site enable two-factor authentication and monitor accounts for unauthorized activity. Reporting the domain to services such as PhishDestroy helps in maintaining blocklists.