.ly, .by and .ru are legitimate in their own context.

https://www.mos.ru (Moscow's city site), https://www.belarus.by/ (Belarus' tourism site) and https://libyaobserver.ly (Libyan newspaper) are three examples.

And I'd be almost as suspicious of buy-viagra-pills.de as I would be of buy-viagra-pills.ru.

.de domains require a German postal address, so I would actually trust them more than the .ru equivalent. Plenty of other ccTLDs have even stricter nationality requirements for registration.