officialcl[.]com

The domain officialcl.com has been identified as a phishing site targeting users with fraudulent coupon offers under the guise of CannabisLife, a recognized brand in the cannabis industry. Analysis indicates this is a generic phishing threat, designed to deceive visitors into disclosing personal or financial information through fake promotional incentives. The domain is currently offline, though prior activity suggests it may re-emerge under similar infrastructure. Infrastructure analysis reveals the domain was registered on February 21, 2026, through NameCheap, Inc., a registrar frequently associated with malicious domains. It resolves to the IP address 104.225.128.78 and has been flagged by 3 of 95 security vendors on VirusTotal. The domain appears on three security blocklists and is referenced in one AlienVault OTX threat intelligence pulse. Additional indicators include a Gridinsoft trust score of 0/100 and detection by multiple security tools, including MetaMask and SEAL. The site employed LiteSpeed and HTTP/3 technologies, with an SSL certificate issued by DigiCert Inc, which may have been used to lend an appearance of legitimacy. As of the latest assessment, officialcl.com remains offline; however, users and organizations are advised to treat any future iterations of this domain or similar variants as high-risk. Network administrators should block the IP address 104.225.128.78 and monitor for related domains registered through the same registrar. End users should verify the authenticity of promotional offers directly through official brand channels and avoid interacting with unsolicited coupon or discount pages. Security teams are encouraged to update detection rules to include this domain and its associated indicators of compromise.