# PhishDestroy domain threat record: connectipes.com Content language: English Canonical HTML report: https://phishdestroy.io/domain/connectipes.com/ Machine-readable companion: https://phishdestroy.io/domain/connectipes.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-28 06:17:40 UTC - Last availability or vendor check: 2026-10-28 12:30:56 UTC - Stored record updated: 2026-10-28 12:30:56 UTC - VirusTotal detections in the stored snapshot: 0/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 216.150.1.1 - Registrar in stored WHOIS data: NAMECHEAP INC - Registrar country in stored WHOIS data: US - Last stored HTTP status: 308 ## Evidence links - URLScan report: https://urlscan.io/result/01a18127-775b-7788-8be1-50005c6d55f5/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/connectipes.com - Certificate Transparency search: https://crt.sh/?q=%25.connectipes.com - Web Archive lookup: https://web.archive.org/web/*/https://connectipes.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy added connectipes.com to its internal blocklist on 2026-10-28 because the domain was registered only one day earlier, triggering the “young domain” rule. The page retrieved at that time displayed the title “Access Restricted — connectIPS” and a notice that the site is only reachable from Nepal‑based mobile browsers. An HTTP 308 redirect from the apex to the www subdomain was observed on 2026-10-28. How the scam works No specific malicious functionality was observed on the page, so the listing does not demonstrate a concrete phishing, credential‑harvesting, or wallet‑draining scheme. The domain is flagged because newly created sites are frequently abused for such attacks, representing a generic risk of future exploitation. Evidence VirusTotal scanned the domain on 2026-10-27 and reported zero detections from 92 engines. Google Safe Browsing checked on 2026-10-28 and did not flag the site, while OTX recorded a single pulse referencing the domain on the same day. urlscan.io captured the site on 2026-10-28; its machine‑learning engine gave a malicious score of 85 but the overall verdict was non‑malicious, and no external blocklists listed the domain. PhishDestroy’s internal list marks the domain as blocked as of 2026-10-28; external blocklist count is zero. Infrastructure The domain was registered with NameCheap on 2026-10-27 and uses Vercel DNS (ns1.vercel-dns.com, ns2.vercel-dns.com). TLS is provided by Let’s Encrypt, valid from 2026-10-27 to 2027-01-25, and the recorded IP 216.150.1.1 belongs to Amazon.com, Inc.; the server header identified the platform as Vercel. What to do Visitors should avoid entering credentials or personal data on the site, as no collection was observed but the domain is flagged as suspicious. Organizations can add the exact hostname (connectipes.com and www.connectipes.com) to web‑filtering or monitoring rules and review access logs for unexpected requests. If any credentials were submitted, change them immediately; otherwise, continue to monitor the domain for future changes. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a18127-775b-7788-8be1-50005c6d55f5/ Cloudflare Radar report: https://radar.cloudflare.com/scan/8c3da593-99da-4052-88a9-5040d951e812 Stored capture screenshot: https://i.ibb.co/YBSBnyhB/6315a68b6720.png Cloudflare Radar screenshot (2026-10-28T06:18:11Z): https://screenshots.phishdestroy.io/cf/8c3da593-99da-4052-88a9-5040d951e812.png VirusTotal report: https://www.virustotal.com/gui/domain/connectipes.com Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=connectipes.com Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-28 06:19:21 UTC ## Stored page captures - Primary capture: https://i.ibb.co/YBSBnyhB/6315a68b6720.png Captured: 2026-10-28 06:17:40 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a18127-775b-7788-8be1-50005c6d55f5.png Captured: 2026-10-28 06:17:40 UTC Source report: https://urlscan.io/result/01a18127-775b-7788-8be1-50005c6d55f5/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/8c3da593-99da-4052-88a9-5040d951e812.png Captured: 2026-10-28 06:18:11 UTC Source report: https://radar.cloudflare.com/scan/8c3da593-99da-4052-88a9-5040d951e812 SHA-256: dc96cf664aed854e576accc332a5e588fdbe7329dc874c12270a8d603e287142 - URLQuery: https://screenshots.phishdestroy.io/uq/895f2b73-4f62-4442-9523-b8ec5045635e.png Source report: https://urlquery.net/report/895f2b73-4f62-4442-9523-b8ec5045635e SHA-256: d3053a0b903342e87a310ba92015451eaecb91f1e02c7ef5cab6df686ed006c2 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-28T06:18:20Z", "uuid": "01a18127-775b-7788-8be1-50005c6d55f5", "scanned_at": "2026-10-28T06:16:55Z", "final_url": "https://www.connectipes.com/access-denied.html", "status": 200, "redirected": "parent-domain", "redirects": [ { "to": "https://connectipes.com/", "from": "http://connectipes.com/", "status": 307 }, { "to": "https://www.connectipes.com/", "from": "https://connectipes.com/", "status": 308 }, { "to": "https://www.connectipes.com/access-denied.html", "from": "https://www.connectipes.com/", "status": 302 } ], "ip": "216.150.1.1", "domains": [ "fonts.gstatic.com", "fonts.googleapis.com", "connectipes.com" ], "ips": [ "142.251.110.94", "142.251.110.95", "216.150.1.1", "216.150.1.193" ], "asns": [ "15169", "16509" ], "countries": [ "US" ], "doc_hash": "87c78e1230a53126cbf726987e8ca2fb092f8b445d6125b7440c046a12c6876d", "globals": [ "params", "reason", "title", "message" ], "tls": { "san": [ "*.connectipes.com", "connectipes.com" ], "cipher": "AES_128_GCM", "issuer": "YR2", "subject": "*.connectipes.com", "protocol": "TLS 1.3", "valid_to": "2027-01-25T09:15:45Z", "valid_from": "2026-10-27T09:15:46Z" }, "domain_age_days": 0, "apex_age_days": 0, "tls_age_days": 0, "tls_valid_days": 89, "requests": 4, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 85, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "Vercel", "content-type": "text/html; charset=utf-8", "strict-transport-security": "max-age=63072000" } }, "cf": { "v": 1, "fetched_at": "2026-10-28T06:18:25Z", "uuid": "8c3da593-99da-4052-88a9-5040d951e812", "scanned_at": "2026-10-28T06:18:11Z", "final_url": "https://www.connectipes.com/access-denied.html", "status": 200, "redirected": "subdomain", "history": [ { "url": "https://connectipes.com/", "status": 308 }, { "url": "https://www.connectipes.com/", "status": 302 }, { "url": "https://www.connectipes.com/access-denied.html", "status": 200 } ], "dom_hash": "b37d36c52549d2b7c0232c5c139da04ccc27b3ef5e32bb79375f4231f17b0e15", "doc_hash": "87c78e1230a53126cbf726987e8ca2fb092f8b445d6125b7440c046a12c6876d", "domain_risks": [ "Newly Seen Domains", "Security Risks" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "connectipes.com", "type": "A", "value": "216.150.16.1" }, { "name": "connectipes.com", "type": "A", "value": "216.150.16.129" }, { "name": "www.connectipes.com", "type": "A", "value": "216.150.16.129" }, { "name": "www.connectipes.com", "type": "A", "value": "216.150.16.193" } ], "dnssec_valid": false, "ip": "127.0.1.16", "whois": { "registrar": "NameCheap, Inc.", "created": "2026-10-27T09:11:02Z", "updated": "2026-10-27T09:12:13Z", "expires": "2027-10-27T09:11:02Z", "nameservers": [ "ns1.vercel-dns.com", "ns2.vercel-dns.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-28T06:18:03Z", "analysis_at": "2026-10-27T21:21:30Z", "stats": { "timeout": 0, "harmless": 55, "malicious": 0, "suspicious": 0, "undetected": 37 }, "reputation": 0, "registrar": "NAMECHEAP INC", "created": "2026-10-27T09:11:02Z", "expires": "2027-10-27T09:11:02Z", "updated": "2026-10-27T09:12:13Z", "first_seen": "2026-10-27T09:20:48Z", "dns": [ { "ttl": 60, "type": "CAA", "value": "letsencrypt.org" }, { "ttl": 3600, "type": "SOA", "rname": "hostmaster.nsone.net", "value": "ns1.vercel-dns.com" }, { "ttl": 1800, "type": "A", "value": "216.150.16.193" }, { "ttl": 21600, "type": "NS", "value": "ns2.vercel-dns.com" }, { "ttl": 21600, "type": "NS", "value": "ns1.vercel-dns.com" }, { "ttl": 60, "type": "CAA", "value": "sectigo.com" }, { "ttl": 60, "type": "CAA", "value": "pki.goog" }, { "ttl": 1800, "type": "A", "value": "216.150.1.65" } ], "dns_at": "2026-10-27T21:22:33Z", "jarm": "3fd3fd00000000000043d43d00043dc3b2afa8a5ec09b510a8559aff7899fb", "cert": { "san": [ "*.connectipes.com", "connectipes.com" ], "issuer": "Let's Encrypt / YR2", "serial": "65821703c6ba8a7e1e219abf633755ef404", "sha256": "4dbefe2da3a9006770db80089da007bf27b92aa4ebc5c4b4280d357054600e05", "subject": "*.connectipes.com", "valid_to": "2027-01-25T09:15:45Z", "valid_from": "2026-10-27T09:15:46Z" }, "whois": { "registrar": "NAMECHEAP INC", "registrar_iana_id": "1068", "registrar_url": "http://www.namecheap.com", "created": "2026-10-27T09:11:02Z", "updated": "1-01-01T00:00:00Z", "expires": "2027-10-27T09:11:02Z", "status": [ "clientTransferProhibited" ], "nameservers": [ "ns1.vercel-dns.com", "ns2.vercel-dns.com" ], "dnssec": "unsigned" }, "rdap": { "status": [ "client transfer prohibited" ], "events": { "registration": "2026-10-27T09:11:02Z", "registrar expiration": "2027-10-27T09:11:02Z", "last update of RDAP database": "2026-10-27T09:12:58Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-28T06:18:47Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "count": 3, "domain": "connectipes.com", "issuers": [ "letsencrypt.org", "pki.goog", "sectigo.com" ] }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "social_tags": { "title": "Access Restricted — connectIPS" }, "trackers": { "requests": 3, "trackers": [ { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "Google Static", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 } ] }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 308, "timings": { "dns": 30, "tls": 12, "wait": 33, "connect": 6, "download": 1 }, "response_ms": 82 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_128_GCM_SHA256", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443 ] }, "carbon": { "bytes": 3429, "co2_grams": 0.0001, "cleaner_than": 95 }, "dns_server": { "ns": [ { "ip": "198.51.45.13", "host": "ns2.vercel-dns.com" }, { "ip": "198.51.44.13", "host": "ns1.vercel-dns.com" } ], "zone": "connectipes.com" }, "location": { "ip": "216.150.1.193", "asn": "16509", "org": "Amazon.com, Inc.", "city": "Los Angeles", "country": "US" }, "ssl": { "issuer": "Let's Encrypt / YR2", "subject": "*.connectipes.com" }, "dns": { "A": [ "216.150.1.193", "216.150.16.193" ], "NS": [ "ns1.vercel-dns.com", "ns2.vercel-dns.com" ], "SOA": "{\"nsname\": \"ns1.vercel-dns.com\", \"hostmaster\": \"hostmaster.nsone.net\", \"serial\": 1793092321, \"refresh\": 43200, \"retry\": 7200, \"expire\": 1209600, \"minttl\": 600}" }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "header": "max-age=63072000", "message": "HSTS header does not include all subdomains." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": "max-age=63072000", "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "216.150.1.193", "family": 4 }, "redirects": { "chain": [ "https://connectipes.com", "https://www.connectipes.com/", "/access-denied.html?reason=device" ], "count": 2 }, "subdomains": { "count": 1, "subdomains": [ "www.connectipes.com" ] }, "whois": { "registrar": "NameCheap, Inc.", "created": "2026-10-27T09:11:02Z", "updated": "2026-10-27T09:12:13Z", "expires": "2027-10-27T09:11:02Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "ns1.vercel-dns.com", "ns2.vercel-dns.com" ] }, "headers": { "headers": { "server": "Vercel", "content-type": "text/html; charset=utf-8", "strict-transport-security": "max-age=63072000" } } } } ```