modafinilswitzerland[.]com

PhishDestroy identifies modafinilswitzerland.com as a newly active phishing domain masquerading as a legitimate Swiss pharmacy specializing in modafinil sales. The domain employs a classic generic phishing tactic, luring victims with the false promise of high-demand pharmaceuticals while covertly harvesting sensitive payment and personal data. No affiliation with any authentic pharmaceutical brand or Swiss regulatory body has been confirmed at this stage, strongly suggesting a fraudulent operation designed for credential theft and financial exploitation. This domain was flagged on April 28, 2025, and resolves to the IP address 31.184.236.238. Currently, it remains undetected by VirusTotal with a score of 0/95 and has not been flagged by Google Safe Browsing (GSB). It was registered through Fewmoretaps OU, operating under the alias Trustname.com. The lack of detections and rapid registration timeline may indicate a newly deployed, low-profile campaign. There are currently no blocklist entries associated with this domain, emphasizing the need for proactive monitoring and user awareness. As of this advisory, modafinilswitzerland.com remains active and under investigation with a risk level still being assessed. Immediate defensive actions include adding the domain and its associated IP to network blocklists and informing users to avoid interacting with the site. The absence of detections suggests a potential blind spot in automated detection systems, elevating the urgency for manual review and threat hunting. While the immediate risk is classified as under investigation, users should treat this domain as hostile until further intelligence becomes available. Regular updates to security tools and user education on recognizing deceptive pharmacy domains are strongly recommended to mitigate exposure.