connexions[.]mise-ajour-connexions[.]inovaperf[.]me

connexions.mise-ajour-connexions.inovaperf.me is currently listed as an active generic phishing site with a high risk rating. The domain resolves to the IPv4 address 185.157.247.2, which is hosted by OVH SAS, the registrar that created the domain on 13 October 2018. No nameserver records were returned (NS_NOT_FOUND), indicating that the domain’s DNS configuration may be partially hidden or misconfigured. Google Safe Browsing classifies the URL as a social‑engineering threat, and the domain appears on a single external blocklist.

PhishDestroy has also blocked the domain, confirming its involvement in phishing campaigns. VirusTotal analysis shows that 15 of 91 security vendors flagged the domain, providing independent confirmation of malicious intent. The combination of registrar information, IP hosting, and multiple detection sources supports the assessment that the domain is being used to host phishing content, although the specific landing page, targeted brand, and credential‑harvesting mechanisms have not been publicly disclosed. The lack of publicly available page‑title or SSL certificate details limits attribution to a particular phishing kit, and no additional infrastructure such as C2 servers or related domains was identified in the available data.

Defenders should block or sinkhole the domain at the DNS and network layers, monitor outbound connections to 185.157.247.2, and update intrusion‑detection signatures to include the observed indicators. Security teams should also correlate authentication logs for any attempts to reach the domain and reinforce user‑education programs about social‑engineering attacks. Continuous re‑scanning of the domain is recommended to capture any changes in payload or hosting infrastructure, and until further forensic analysis is obtained, the domain should be treated as a confirmed phishing vector.