2connektin[.]click

Analysis indicates that 2connektin.click is an active generic phishing site that currently returns an HTTP 302 redirect and displays the page title “Account Suspended”. The domain resolves to the IP address 209.182.224.47, which is hosted by Shock Hosting LLC in the United States. Registration was performed through NameSilo, LLC and the authoritative nameservers are ns4.loominost.com and ns3.loominost.com. The site serves a valid TLS certificate issued by Let’s Encrypt (YR1). The infrastructure has been observed on three security blocklists and is blocked by PhishDestroy, MetaMask, and SEAL. VirusTotal scans show that six of ninety‑one security vendors flag the domain, reinforcing the suspicion of malicious activity. The current risk level is high and the status remains active. Defenders should add the domain and its resolving IP to inbound and outbound deny lists, monitor DNS queries for the associated nameservers, and ensure that web filtering solutions reference the blocklists that already contain the domain. Continuous re‑evaluation is advised because the page content beyond the title has not been publicly disclosed.