cannabisinlinea[.]net

The domain cannabisinlinea.net is currently flagged as a high‑risk brand‑impersonation site targeting users of the Linea blockchain platform. The site was registered on 21 January 2022 through the Center of Ukrainian Internet Names (UKRNAMES) and continues to resolve to the IP address 91.222.173.30, which is announced by AS43641 SOLLUTIUM EU Sp z.o. and geolocated to the Netherlands. The hosting infrastructure uses the nameservers ns1-us.v-sys.org and ns2-us.v-sys.org, and the web server returns an HTTP 302 redirect, indicating an attempt to forward visitors to another location. The TLS certificate is issued by Let’s Encrypt (identifier E7), providing encryption but offering no assurance of legitimacy.

Reputation services rate the domain extremely poorly: Scamadviser assigns a trust score of 1 / 100 and Gridinsoft reports a score of 0 / 100. The domain appears on one public blocklist and has been actively blocked by the PhishDestroy service. In the Open Threat Exchange, the domain is referenced in a single threat‑intelligence pulse, suggesting limited but existing community awareness. VirusTotal analysis shows that five of ninety‑three scanning engines have flagged the domain, reinforcing the suspicion of malicious intent. The only observed page element is the title “Home – Cannabis In Linea”, which does not reference Linea directly but the brand target is listed as Linea, confirming the impersonation claim.

No additional content has been publicly disclosed, so the exact phishing workflow (e.g., credential‑stealing pages, malicious downloads) remains unknown. Defenders should add cannabisinlinea.net to URL filtering and domain‑blocking policies, especially on networks that support Linea users. Monitoring of outbound connections to 91.222.173.30 and its associated ASN is recommended. Because the site uses a legitimate‑looking Let’s Encrypt certificate, reliance on certificate validation alone is insufficient; reputation‑based controls must be enforced.