Our automated security review found no threat indicators on cvs.com. The site appears legitimate based on the signals we checked, but always stay alert for phishing emails that spoof real domains.

Is cvs.com safe to use?

cvs.com passed our automated security checks with a trust score of 90/100. No antivirus engines or major blacklists flagged the site at the time of the last scan.

Does cvs.com have a valid SSL certificate?

Yes. cvs.com presents a valid TLSv1.3 certificate issued by DigiCert Inc · DigiCert Global G2 TLS RSA SHA256 2020 CA1, expiring in 94 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.

How old is the cvs.com domain?

cvs.com is 30.5 years old, registered on 1/30/1996 through MarkMonitor Inc.. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.

Has cvs.com been flagged by antivirus engines?

No. All 92 antivirus engines in our malware network report cvs.com as clean.

Is cvs.com on any phishing or malware blacklists?

No. cvs.com is not currently listed on the major browser blocklist feeds that modern browsers use.

Where is cvs.com hosted?

cvs.com resolves to an IP operated by Akamai Technologies, Inc. in US (usage type: Data Center/Web Hosting/Transit). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.

How often is the cvs.com report updated?

This is a permanent record of the scan run on July 8, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around cvs.com have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.

SAFE

No threats detected

All checks passed. This site appears legitimate — but always stay alert for phishing even on trusted domains.

Security Review

Is cvs.com legit or a scam?

Our verdict:Safe· 90/100

SafeSuspiciousDangerous

Official CVS Pharmacy website with 30-year-old domain, clean security scans, and legitimate corporate registration.

Why we trust it

Domain registered January 1996 and owned by CVS Pharmacy, Inc., a publicly traded company with 11,000+ stores.Zero detections across 92 antivirus engines and clean browser blocklist status.Professional layout with functional navigation, prescription tools, and legitimate promotional content.

cvs.comScanned 7h ago

Post Facebook

Trust score

SAFE

Score breakdown

Heuristics 87·MT 92

See the live page ↓

Positive signals (5)

Antivirus clearNot on major blacklistsDomain is 30 years oldEncrypted connectionClean server reputation

View density

Analysis Summary

Threat Intelligence

0/92

All engines report clean

Domain Age

30 years old

Registered Jan 30, 1996

Intelligence

Safe

Low likelihood · 95% confidence

Website Preview

LIVE RENDER

cvs.com

1Professional layout with high-quality branding and consistent typography

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site. See full visual analysis →

Visual analysis

We capture a fresh screenshot of the live page and ask a vision model to look for scam visual patterns — fake trust badges, countdown timers, overlay pop-ups, and visual clones of legitimate brands.

/ 100

No visual red flags

No scam visual patterns detected

The website displays a professional, fully-rendered interface consistent with a legitimate corporate retail and pharmacy presence, showing no visual indicators of a scam.

Visual risk0/100

What our vision model saw

6 signals

Professional layout with high-quality branding and consistent typography

Functional navigation menu including prescription management and store locator

Standard cookie and data collection disclosure banner at the bottom

Legitimate promotional content for GLP-1 medications with clear pricing and disclaimers

Presence of a functional search bar and secure sign-in portal

No urgency tactics, fake trust badges, or suspicious pop-ups detected

Intelligence

Advanced threat intelligence

Analysis

Low scam likelihoodengineMT · Guardiantrust92/100

MT AgentLive web researchVisual inspection

Confidence

The domain cvs.com was registered in January 1996 and belongs to CVS Pharmacy, Inc., a publicly traded company with thousands of physical stores. Our antivirus network returned zero detections and the hosting IP shows minimal abuse history. The page renders a professional retail interface with proper navigation, prescription tools, and no urgency tactics or fake trust signals. Evidence confirms the company maintains its own security page warning about impersonation scams, which explains the phone and email complaints found. The combination of extreme domain age, verified business registration, and clean technical signals establishes this as the genuine corporate site rather than a clone or fraud operation.

Full dossier

Analysis complete

Page Content

The page loads a fully rendered corporate pharmacy site with navigation for prescriptions, store locator, and account sign-in. Visible content includes legitimate GLP-1 medication promotions with proper disclaimers and a standard cookie banner. No contact details appear in the scanned body text, which is typical for the homepage of a large retailer that routes support through dedicated pages.

Infrastructure

The site serves over HTTPS with a DigiCert certificate valid for another 94 days. The hosting IP 23.195.102.14 carries an abuse score of zero and only one historical report. External resources load from known CDNs including Adobe and Tealium, consistent with enterprise-grade operations. One redirect hop stays within the same domain.

Domain History

WHOIS records show the domain registered on 30 January 1996 through MarkMonitor Inc., giving it an age of 30.4 years. The registrant is listed as CVS Pharmacy, Inc. with no privacy protection, matching the publicly known corporate owner. Business registration confirms the entity is active in Rhode Island with headquarters at 1 CVS Drive, Woonsocket.

Web Reputation

Four scam reports reference phone and email campaigns impersonating CVS to harvest Medicare numbers or personal data, not the website itself. The company publishes its own alerts about fraudulent sites and emails. Aggregated customer reviews exist on major platforms, though many reflect in-store experiences rather than the website. No reports indicate the actual cvs.com domain distributes malware or harvests credentials.

What this means for you

The site is the authentic CVS Pharmacy online presence. Exercise normal caution with any unsolicited phone calls or emails claiming to be from CVS, as those remain common impersonation vectors. Use the official site directly rather than clicking links in messages to avoid falling for look-alike domains.

Risk Factors

Scam reports document phone and email campaigns impersonating CVS to harvest personal or Medicare information.
No contact email, phone, or address appears on the homepage, which is standard for large retailers but can frustrate users seeking support.

Positive Signals

Domain registered January 1996 and owned by CVS Pharmacy, Inc., a publicly traded company with 11,000+ stores.
Zero detections across 92 antivirus engines and clean browser blocklist status.
Professional layout with functional navigation, prescription tools, and legitimate promotional content.
Company maintains its own security page warning customers about phishing attempts.
Hosting IP shows zero abuse score and the SSL certificate is issued by DigiCert.

AI Recommendation

Use the site directly by typing cvs.com in your browser. Ignore unsolicited calls, texts, or emails claiming to be from CVS and never provide personal details to anyone contacting you first.

Next-gen fraud intelligence

Evidence-backedCross-checked

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for cvs.com, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Business registration

Active · United States (Rhode Island)

Site traces back to an actively registered business.

Clone check

Not a clone

No well-known site's layout or branding detected here.

Typosquat check

No look-alike match

The domain doesn't resemble any well-known brand's spelling.

Web mentions

4 scam reports · 85000 complaints

Key findings

7 headline facts from open-web research

Domain cvs.com registered January 30, 1996 (30+ years old); owned/operated by CVS Pharmacy, Inc.
CVS Pharmacy, Inc. is a subsidiary of publicly traded CVS Health Corporation (NYSE: CVS), headquartered in Woonsocket, Rhode Island.
Official site lists customer service numbers including 1-800-SHOP-CVS and 1-888-607-4CVS; has dedicated security page warning about phishing.
Multiple news outlets and organizations report phone, text, and email scams impersonating CVS to request personal/Medicare info or offer fake rewards.
CVS maintains its own alerts on fraudulent sites, emails (e.g., not from extracare@your.cvs.com), and calls posing as pharmacy reps.
Yelp aggregates ~85,574 reviews for CVS Pharmacy locations averaging 2.2/5; Trustpilot has thousands of reviews for cvs.com.
Wikipedia and corporate records confirm CVS as legitimate large retail pharmacy chain with 11,000+ stores and online operations via cvs.com.

Scam reports (4)

Direct quotes from public scam databases, forums, and news.

WBRCopen
"Scammers claiming to be from CVS have called several times offering free shipping for prescriptions. During the phone call the scammers asked for her personal information like date of birth, insurance and addresses."
Next Village SFopen
"The scam involves phone calls in which individuals posing as CVS pharmacy representatives request personal information, such as an individual's Medicare number or other records."
TINA.orgopen
"A TINA.org reader received an email from what appeared to be CVS offering a free gift worth up to $100 in exchange for completing a short survey... CVS didn’t send the email."
CVS official security pageopen
"CVS Caremark wants to alert you to a fraudulent website that is falsely posing as a legitimate CVS/pharmacy website. This site is not owned, operated, or affiliated in any way with CVS Caremark."

Business registration

Status: active · United States (Rhode Island)

CVS Pharmacy, Inc. is a domestic profit corporation registered in Rhode Island, headquartered at 1 CVS Drive, Woonsocket, RI 02895. Name changed from CVS, Inc. on 02-10-1997. Parent is CVS Health Corporation (NYSE: CVS).

Research summary

Narrative write-up from our AI analyst, grounded on the facts above

Our research found four reports of phone and email scams where fraudsters pose as CVS pharmacy staff to obtain personal or Medicare information. CVS maintains its own security page warning about these impersonation attempts and fraudulent websites. The domain itself shows no malicious activity and belongs to the legitimate publicly traded company operating since 1963.

Domain Timeline

Jan 30, 1996
Domain registered
First appeared in WHOIS records — 30 years old today.
Jul 8, 2026
Latest security review — Reviewed as safe
This scan re-ran every check and found no active threat signals.

cvs.com has operated for years with no threat signals in this review — a long, stable track record, though it is never a guarantee on its own.

Threat Detection

Antivirus Engines

Clean pass · verified

Clean across 92 engines

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. None of them flagged this URL in the last scan.

0Malicious0Suspicious61Harmless92Engines

Clean

Kaspersky

Clean

Bitdefender

Clean

Microsoft

Not in pass

ESET-NOD32

Not in pass

Avira

Not in pass

Sophos

Clean

Fortinet

Clean

Google Safebrowsing

Clean

Emsisoft

Clean

No engine detections. The URL passed every antivirus and blacklist engine we queried in this scan. Stay vigilant — AV coverage is only one signal among many.

Security Scans

Blacklist Check

Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing

Not listedCheck ↗

VirusTotal

Not listedCheck ↗

AbuseIPDB

Not listedCheck ↗

Also verify:Spamhaus ↗DNSBL / SURBL ↗PhishTank ↗

Technical Details

domain · encryption · redirects · server reputation · referenced

Contact Verification

We fetched the page and looked for real-world contact details. Legitimate businesses almost always publish an email on their own domain, a phone number, and a postal address. Scam shops usually don't.

What We Found

No clear contact details on the page

Emails on site's domainNone

Phone numbersNone

Postal addressNot listed

Linked social profiles0

Signal Summary

Several contact red flags

No contact email found anywhere on the page.
No phone number listed on the page.
No postal address visible on the page.

Domain & Encryption

Domain History

Age30 years old

RegistrarMarkMonitor Inc.

RegisteredJan 30, 1996

ExpiresJan 31, 2027

Owner privacyVisible

Encryption Certificate

StatusValid

ProtocolTLSv1.3

IssuerDigiCert Inc · DigiCert Global G2 TLS RSA SHA256 2020 CA1

ExpiresOct 10, 2026 (94d)

Self-signedNo

Hosting & Technology

HostingAkamai Technologies, Inc.

Server locationUS

Redirect Chain

Hops

Cross-domain

Lookalike

Punycode

1301http://cvs.com/
2200https://www.cvs.com/

Server Reputation

Abuse Intelligence

Confidence score0%

Reports on file1

ISPAkamai Technologies, Inc.

Usage typeData Center/Web Hosting/Transit

Referenced Domains

Outbound domains this page links to or loads resources from. Each links to its own security scan.

cdn.cookielaw.org cdn1.adoberesources.net edge.adobedc.net tags.tiqcdn.com cdn.appdynamics.com

What to do

Still, stay alert

No major threat indicators — but a clean scan does not guarantee every page is safe, and phishing emails routinely spoof real domains.

Double-check the exact URL in your address bar
Confirm you are actually on cvs.com and not a lookalike like c-vs.com.com or an IDN homoglyph.
Use a password manager
Password managers only auto-fill on the exact domain they were saved for — they refuse to fill lookalike domains, which is the single best phishing defence.
Discuss this site on the forum
If you have first-hand experience with this site — good or bad — share it with the MalwareTips community.
Open

Final Verdict

Trust / 100

Final Verdict·cvs.com

SAFE

This is the official website of CVS Pharmacy, a major U.S. retail pharmacy chain operating since 1963. The domain is 30 years old, registered to the legitimate company, and shows no malicious indicators. Users should still watch for phone and email scams impersonating CVS rather than issues with the site itself.

Use the site directly by typing cvs.com in your browser. Ignore unsolicited calls, texts, or emails claiming to be from CVS and never provide personal details to anyone contacting you first.

AV engines

MT passes

Net signals

Scan another URL

Security review completemalwaretips.com/url-scan

Safety FAQ

Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.

Our automated security review found no threat indicators on cvs.com. The site appears legitimate based on the signals we checked, but always stay alert for phishing emails that spoof real domains.
cvs.com passed our automated security checks with a trust score of 90/100. No antivirus engines or major blacklists flagged the site at the time of the last scan.
Yes. cvs.com presents a valid TLSv1.3 certificate issued by DigiCert Inc · DigiCert Global G2 TLS RSA SHA256 2020 CA1, expiring in 94 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
cvs.com is 30.5 years old, registered on 1/30/1996 through MarkMonitor Inc.. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.
No. All 92 antivirus engines in our malware network report cvs.com as clean.
No. cvs.com is not currently listed on the major browser blocklist feeds that modern browsers use.
cvs.com resolves to an IP operated by Akamai Technologies, Inc. in US (usage type: Data Center/Web Hosting/Transit). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
This is a permanent record of the scan run on July 8, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around cvs.com have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.

Recently scanned

Other Safe reports

akademiaprzetrwaniawildjoy.pl

groupleavingcards.com

3h ago

Read the review

Safetrust86

studium-krishnamurti.se

Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…

Loading comments…

This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.