pitchwcl[.]xyz

The domain pitchwcl.xyz is flagged by 4 out of 92 vendors on VirusTotal for phishing activities. It is also listed on blocklists maintained by PhishDestroy, MetaMask, and SEAL. Despite being offline now, it previously posed a threat to users by attempting to deceive them into divulging sensitive information. The domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and hosted on an IP address managed by CloudFlare, Inc. in Canada.

The domain's SSL certificate was issued by Let's Encrypt, a common choice for attackers due to its free and automated nature. This phishing operation exploited the trust users place in SSL certificates, falsely assuring them of the site's legitimacy. The combination of a reputable SSL issuer and a well-known hosting provider like CloudFlare, Inc. potentially increased the domain's credibility in the eyes of unsuspecting users.

Though pitchwcl.xyz is currently offline, its presence on multiple blocklists indicates it was part of a broader phishing campaign. The swift detection and inclusion in public blocklists helped mitigate its impact. Phishing domains like this often exploit the time window between domain registration and detection by antivirus and security vendors. PhishDestroy's proactive monitoring and early detection capabilities play a crucial role in identifying and neutralizing such threats before they can cause significant harm.