# PhishDestroy domain threat record: connectechglob.com Content language: English Canonical HTML report: https://phishdestroy.io/domain/connectechglob.com/ Machine-readable companion: https://phishdestroy.io/domain/connectechglob.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-28 01:16:29 UTC - Last availability or vendor check: 2026-10-28 01:16:29 UTC - Stored record updated: 2026-10-28 01:54:33 UTC - VirusTotal detections in the stored snapshot: 5/92 - Independent public blocklist matches in the stored snapshot: 2 - Matching public blocklists: MetaMask, SEAL - Google Safe Browsing stored result: no stored flag ## Stored classification - Targeted brand: gmail ## Stored infrastructure - Observed IP address: 185.199.108.153 - Registrar in stored WHOIS data: Cloudflare, Inc. - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2026-10-20 06:13:16 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a18013-bc35-76dc-945e-6b88a0ff3c97/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/connectechglob.com - Certificate Transparency search: https://crt.sh/?q=%25.connectechglob.com - Web Archive lookup: https://web.archive.org/web/*/https://connectechglob.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy added connectechglob.com to its blocklist on 2026-10-28 after VirusTotal flagged it as malicious. An AI intake on 2026-10-27 saw a page titled “Connectech Glob — Inicio” describing a Spanish tech‑tutorial channel with no phishing signs. The site returned HTTP 200 on the same day. How the scam works When several security vendors label a domain as phishing, the typical risk is that the site could be used to host deceptive pages that harvest login credentials or impersonate trusted brands. No such malicious content was observed on connectechglob.com during the intake review, so the specific attack vector remains unconfirmed. Evidence VirusTotal (2026-10-27) reported five detections from 92 engines: four vendors (alphaMountain.ai, CRDF, Forcepoint ThreatSeeker, Kaspersky) marked it malicious and one (Gridinsoft) marked it suspicious. Google Safe Browsing (2026-10-28) did not flag it, while urlscan (2026-10-28) gave a malicious engine score of 18 but an overall non‑malicious verdict. External blocklists MetaMask and SEAL listed the domain on 2026-10-28; OTX showed one pulse, and PhishDestroy’s internal list also contains it as of that date. Infrastructure The domain was created on 2026-10-20 via Cloudflare, Inc., using the nameservers georgia.ns.cloudflare.com and peyton.ns.cloudflare.com. A records point to four GitHub Pages IPs (185.199.108.153‑111.153) hosted by Fastly in the United States. Its Let’s Encrypt / YR2 TLS certificate, valid 2026-10-20 to 2027-01-18, covers both the apex and www sub‑domain; technologies observed include Varnish, GitHub Pages, Google Font API and Fastly. What to do Do not enter credentials or personal data on the site; if you have, change passwords immediately. Watch associated accounts for unexpected activity and enable two‑factor authentication where possible. Defenders should block connectechglob.com in web filters, monitor DNS queries for this exact name, and review access logs for any visits. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a18013-bc35-76dc-945e-6b88a0ff3c97/ Cloudflare Radar report: https://radar.cloudflare.com/scan/2e635858-eabe-4435-9386-394c30c0d27c Stored capture screenshot: https://i.ibb.co/ksVdsdyB/8e0d404536a5.png Cloudflare Radar screenshot (2026-10-28T01:47:58Z): https://screenshots.phishdestroy.io/cf/2e635858-eabe-4435-9386-394c30c0d27c.png VirusTotal report: https://www.virustotal.com/gui/domain/connectechglob.com Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=connectechglob.com Archived copy: https://web.archive.org/web/20261028011715/https://connectechglob.com/ Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-28 01:51:19 UTC ## Stored page captures - Primary capture: https://i.ibb.co/ksVdsdyB/8e0d404536a5.png Captured: 2026-10-28 01:16:29 UTC - URLScan capture: https://urlscan.io/screenshots/01a18013-bc35-76dc-945e-6b88a0ff3c97.png Captured: 2026-10-28 01:16:29 UTC Source report: https://urlscan.io/result/01a18013-bc35-76dc-945e-6b88a0ff3c97/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/2e635858-eabe-4435-9386-394c30c0d27c.png Captured: 2026-10-28 01:47:58 UTC Source report: https://radar.cloudflare.com/scan/2e635858-eabe-4435-9386-394c30c0d27c SHA-256: 0ba61205cb0b8bbed18fc8542af23fba0b71e9c2bad0b7bd980bf49c3dd71c83 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-28T01:50:24Z", "uuid": "01a18013-bc35-76dc-945e-6b88a0ff3c97", "scanned_at": "2026-10-28T01:15:54Z", "final_url": "https://connectechglob.com/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://connectechglob.com/", "from": "http://connectechglob.com/", "status": 307 } ], "ip": "185.199.110.153", "ptr": "cdn-185-199-110-153.github.com", "domains": [ "fonts.gstatic.com", "fonts.googleapis.com" ], "ips": [ "142.251.20.94", "2a00:1450:4001:c13::5f", "185.199.110.153" ], "asns": [ "15169", "54113" ], "countries": [ "US", "DE" ], "link_domains": [ "www.youtube.com", "www.instagram.com", "www.facebook.com", "www.tiktok.com" ], "social": [ "https://www.youtube.com/@Connectechglob", "https://www.instagram.com/connectechglob", "https://www.facebook.com/1398031123388387", "https://www.tiktok.com/@connectechglob" ], "doc_hash": "07228064f08ab705f582679781b2df32fa4c7e1dea4abcc27cb51ec4997393aa", "tls": { "san": [ "connectechglob.com", "www.connectechglob.com" ], "cipher": "AES_128_GCM", "issuer": "YR2", "subject": "connectechglob.com", "protocol": "TLS 1.3", "valid_to": "2027-01-18T07:39:12Z", "valid_from": "2026-10-20T07:39:13Z" }, "domain_age_days": 6, "apex_age_days": 6, "tls_age_days": 7, "tls_valid_days": 89, "requests": 11, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 18, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "GitHub.com", "content-type": "text/html; charset=utf-8" } }, "cf": { "v": 1, "fetched_at": "2026-10-28T01:50:25Z", "uuid": "2e635858-eabe-4435-9386-394c30c0d27c", "scanned_at": "2026-10-28T01:47:58Z", "final_url": "https://connectechglob.com/", "status": 200, "history": [ { "url": "https://connectechglob.com/", "status": 200 } ], "dom_hash": "88e520ce677c850e532821addafc530b010942c16880d97d9f79d61f55800c59", "doc_hash": "07228064f08ab705f582679781b2df32fa4c7e1dea4abcc27cb51ec4997393aa", "domain_risks": [ "Newly Seen Domains", "Security Risks", "New Domains" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "connectechglob.com", "type": "A", "value": "185.199.108.153" }, { "name": "connectechglob.com", "type": "A", "value": "185.199.109.153" }, { "name": "connectechglob.com", "type": "A", "value": "185.199.110.153" }, { "name": "connectechglob.com", "type": "A", "value": "185.199.111.153" } ], "dnssec_valid": false, "ip": "127.0.1.10", "whois": { "registrar": "Cloudflare, Inc.", "created": "2026-10-20T08:13:16Z", "updated": "2026-10-20T08:13:16Z", "expires": "2027-10-20T08:13:16Z", "nameservers": [ "georgia.ns.cloudflare.com", "peyton.ns.cloudflare.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-28T01:47:29Z", "analysis_at": "2026-10-27T03:34:33Z", "stats": { "timeout": 0, "harmless": 52, "malicious": 4, "suspicious": 1, "undetected": 35 }, "detections": { "CRDF": "malicious", "Kaspersky": "phishing", "Gridinsoft": "suspicious", "alphaMountain.ai": "phishing", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "categories": { "alphaMountain.ai": "Phishing (alphaMountain.ai)" }, "registrar": "Cloudflare, Inc.", "created": "2026-10-20T08:13:16Z", "expires": "2027-10-20T08:13:16Z", "updated": "2026-10-20T08:13:17Z", "first_seen": "2026-10-20T10:02:14Z", "dns": [ { "ttl": 300, "type": "A", "value": "185.199.110.153" }, { "ttl": 300, "type": "A", "value": "185.199.108.153" }, { "ttl": 300, "type": "A", "value": "185.199.109.153" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "georgia.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "185.199.111.153" }, { "ttl": 21600, "type": "NS", "value": "georgia.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "peyton.ns.cloudflare.com" } ], "dns_at": "2026-10-27T04:14:11Z", "jarm": "29d3fd00029d29d00041d41d00041d6b5eefa2404a56c2ced79a0d16afe36c", "cert": { "san": [ "connectechglob.com", "www.connectechglob.com" ], "issuer": "Let's Encrypt / YR2", "serial": "6c15ce6c04c1dd1364319072876d1bd640f", "sha256": "03e1da962b9942cd5b63b052c31436519cd00dc0990bc6c811b11a7663ef7431", "subject": "connectechglob.com", "valid_to": "2027-01-18T07:39:12Z", "valid_from": "2026-10-20T07:39:13Z" }, "whois": { "registrar": "Cloudflare, Inc.", "registrar_iana_id": "1910", "registrar_url": "http://www.cloudflare.com", "created": "2026-10-20T08:13:16Z", "updated": "2026-10-20T08:13:16Z", "expires": "2027-10-20T08:13:16Z", "status": [ "addperiod", "clientTransferProhibited", "clienttransferprohibited" ], "nameservers": [ "georgia.ns.cloudflare.com", "peyton.ns.cloudflare.com" ], "dnssec": "unsigned" }, "rdap": { "status": [ "client transfer prohibited", "add period" ], "events": { "expiration": "2027-10-20T08:13:16Z", "last changed": "2026-10-20T08:13:17Z", "registration": "2026-10-20T08:13:16Z", "last update of RDAP database": "2026-10-20T08:13:17Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-28T01:50:42Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "connectechglob.com" }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "archives": { "last": "2026-10-28T01:17:15Z", "first": "2026-10-20T08:41:03Z", "changes": 1, "days_archived": 2, "scans_per_day": 0.13, "avg_page_bytes": 3783 }, "social_tags": { "title": "Connectech Glob — Inicio", "description": "Connectech Glob: tecnología explicada a trazos. Videos dibujados en español que explican cómo funciona por dentro la tecnología de todos los días." }, "trackers": { "requests": 7, "trackers": [ { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "Google Static", "company": "Google", "country": "US", "category": "Hosting", "requests": 3 } ] }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 200, "timings": { "dns": 31, "tls": 22, "wait": 143, "connect": 16, "download": 1 }, "response_ms": 213 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_128_GCM_SHA256", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443 ] }, "carbon": { "bytes": 10229, "co2_grams": 0.0004, "cleaner_than": 71 }, "dns_server": { "ns": [ { "ip": "173.245.59.221", "host": "peyton.ns.cloudflare.com" }, { "ip": "172.64.34.48", "host": "georgia.ns.cloudflare.com" } ], "zone": "connectechglob.com" }, "location": { "ip": "185.199.110.153", "asn": "54113", "org": "Fastly, Inc.", "city": "San Francisco", "country": "US" }, "ssl": { "issuer": "Let's Encrypt / YR2", "subject": "connectechglob.com" }, "dns": { "A": [ "185.199.111.153", "185.199.110.153", "185.199.108.153", "185.199.109.153" ], "NS": [ "peyton.ns.cloudflare.com", "georgia.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"georgia.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2418527368, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}" }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "185.199.110.153", "family": 4 }, "redirects": { "chain": [ "https://connectechglob.com" ] }, "subdomains": { "count": 1, "subdomains": [ "www.connectechglob.com" ] }, "tech_stack": { "technologies": [ "Varnish", "GitHub Pages", "Google Font API", "Fastly" ] }, "linked_pages": { "external": [ "https://www.youtube.com/@Connectechglob", "https://www.instagram.com/connectechglob", "https://www.facebook.com/1398031123388387", "https://www.tiktok.com/@connectechglob" ], "external_count": 4, "internal_count": 3 }, "whois": { "registrar": "Cloudflare, Inc.", "created": "2026-10-20T08:13:16Z", "updated": "2026-10-20T08:13:16Z", "expires": "2027-10-20T08:13:16Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "georgia.ns.cloudflare.com", "peyton.ns.cloudflare.com" ] }, "headers": { "headers": { "server": "GitHub.com", "content-type": "text/html; charset=utf-8" } } } } ```