con[.]webticonsene[.]icu

Analysis indicates that the domain con.webticonsene.icu was registered on June 11 2026 through Gname.com Pte. Ltd. and currently resolves to the IP address 104.21.43.146, a host commonly associated with cloud‑based content delivery services. Within a few weeks of creation the domain has been flagged by multiple security sources. VirusTotal reports that 13 of 91 scanning engines have identified malicious behavior, reflecting a moderate level of detection confidence. Google Safe Browsing categorizes the site as a social engineering threat, and the domain appears on three external blocklists.

Additional protective services, including PhishDestroy, MetaMask and SEAL, have explicitly blocked the domain, reinforcing the assessment of active malicious use. The threat type is identified as generic phishing, suggesting attempts to harvest credentials or personal data without targeting a specific brand. Evidence confirms that the domain is actively being used for phishing, yet no public page title, SSL certificate details, or HTTP response codes have been disclosed, leaving those infrastructure aspects unverified.

The limited visibility of the hosted content prevents a deeper attribution of the phishing kit or payload. Defenders should immediately block traffic to the domain and its resolved IP at network perimeters, update intrusion detection signatures with the observed indicators, and monitor for any related domains sharing the same registrar or IP range. Ongoing observation of security feeds for new detections or changes in the domain’s hosting profile is advised, as the short lifespan and recent creation date imply a fast‑moving campaign.