thccanapa[.]com

This domain, thccanapa.com, operates as a phishing site targeting users seeking to purchase cannabis-related products online. The site presents itself as a legitimate vendor for marijuana, herbs, and cannabis, but analysis confirms it is designed to harvest payment details, personal information, and login credentials under false pretenses. The fraudulent storefront leverages social engineering tactics, including fabricated product listings and urgency-driven prompts, to deceive visitors into entering sensitive data or completing unauthorized transactions. Infrastructure analysis reveals multiple technical indicators supporting the phishing classification. The domain was registered on February 21, 2026, through NiceNIC International Group Co., Limited, and currently resolves to the IP address 82.25.96.145. It appears on one security blocklist and is flagged by 3 out of 95 security vendors on VirusTotal. The site employs a Let's Encrypt SSL certificate, WordPress as its content management system, and additional technologies including MySQL, PHP, LiteSpeed, and jQuery, which are commonly exploited in phishing campaigns to mimic legitimate e-commerce platforms. Users who visited thccanapa.com or interacted with its content should take immediate remediation steps. Any entered credentials or payment details must be considered compromised and should be changed or revoked without delay. Financial institutions should be notified if transactions were attempted. Browser caches and saved passwords associated with the domain must be cleared, and endpoint devices should be scanned for malware using updated security tools. Network-level blocking of the domain and its resolving IP (82.25.96.145) is recommended to prevent further exposure.