canwalet[.]com

Despite being offline, canwalet.com has been flagged as malicious by 3 out of 92 vendors on VirusTotal, indicating its prior use in phishing activities. The domain, registered with Ultahost, Inc., was hosted on an IP address located in Germany, under the organization UltaHost Inc. It utilized a Let's Encrypt SSL certificate, a common choice for phishing sites due to its free and automated issuance.

The domain's page title, "Index of /", suggests a hastily constructed or poorly maintained phishing site. Its presence on public blocklists, including those maintained by MetaMask and SEAL, underscores its targeting of cryptocurrency users, though the exact scam type remains unspecified. The domain's abuse score of 9 out of 100 indicates some malicious activity, though not at the highest severity.

PhishDestroy's inclusion of canwalet.com in its blocklist reflects its proactive approach to identifying and mitigating phishing threats. The domain's takedown highlights the effectiveness of collaborative efforts between cybersecurity entities and hosting providers in combating online scams. While the site is currently offline, its prior detection serves as a reminder of the evolving nature of phishing tactics and the importance of timely threat intelligence.