wtncanada[.]com

This domain, wtncanada.com, is identified as a high-risk phishing site specifically targeting users of the WTN Marketplace, a known Canadian retail platform. Analysis confirms it operates under the guise of a legitimate marketplace portal, using the page title 'We The North market Canada link - WTN marketplace url' to deceive visitors. The domain is currently active and continues to pose a direct threat to individuals seeking authentic WTN-related services or promotions. Infrastructure analysis reveals the domain was registered on October 14, 2023, through Eranet International Limited. It resolves to the IP address 188.114.97.3 and is secured with an SSL certificate issued by Google Trust Services, a common tactic to lend false legitimacy. The domain has been flagged by 3 of 95 security vendors on VirusTotal and appears on one security blocklist. Additionally, it has been documented in one threat intelligence pulse on a major threat-sharing platform, further corroborating its malicious intent. Current status indicates the domain remains active and operational, continuing to host phishing content. Organizations and users are advised to block the domain and its associated IP at the network perimeter. Endpoint protection systems should be updated to include this domain in denylists. Users who may have interacted with the site should immediately reset credentials for any accounts linked to WTN or financial services. Monitoring for unusual activity on associated accounts is strongly recommended, as compromised credentials may be exploited in follow-on attacks.