cannabis-coin[.]pw

The domain cannabis-coin.pw was registered on May 19 2026 through Unstoppable Domains, Inc. and resolves to the Google Cloud host 34.42.100.71 in the us‑central1 region. The site serves over HTTPS using a Let’s Encrypt R13 certificate and returns HTTP 200. The domain appears in sixteen AlienVault OTX pulses and is listed on three public blocklists; it is also blocked by PhishDestroy, MetaMask and SEAL. The page title reported by the crawler is "cannabis-coin.pw | Unstoppable Domains | Unstoppable Domains", indicating that the domain is being used to impersonate the Unstoppable Domains brand. VirusTotal scans show eleven of ninety‑two security vendors flag the domain as malicious. Infrastructure analysis shows the domain uses the provider’s default nameservers ns1.unstoppabledomains.com and ns2.unstoppabledomains.com, which are typical for newly registered domains hosted on shared cloud resources. No additional payloads, redirects, or credential‑harvesting pages have been observed, so the exact phishing vector remains unconfirmed. Defenders should block the domain at network perimeter, add it to URL filtering and endpoint allow‑lists, and monitor for any traffic to the associated IP address. Ongoing collection of page content and user‑interaction logs is recommended to determine the specific credential‑capture mechanisms employed.