pitchwct[.]xyz

The domain pitchwct.xyz has been identified as a phishing threat and is currently offline. Despite its takedown, it was flagged by 2 out of 91 vendors on VirusTotal and is listed on three public blocklists, including PhishDestroy, MetaMask, and SEAL. This indicates its recognition as a malicious entity by multiple security platforms.

Registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, pitchwct.xyz was hosted on an IP address managed by CloudFlare, Inc., located in Canada. The domain's SSL certificate was issued by Let's Encrypt, a common choice for both legitimate and malicious sites due to its automated and free certificate issuance.

The fact that pitchwct.xyz is offline does not negate its potential past impact. Phishing domains often exploit the gap between registration and detection, targeting users before security solutions can respond. The presence of this domain on multiple blocklists underscores its threat level prior to takedown. Security teams should remain aware of such domains, as they often resurface under different guises or domains.