connect[.]spendtym[.]com

connect.spendtym.com is a subdomain of spendtym.com. PhishDestroy first observed the hostname on Oct 28, 2025. The hostname uses “connect,” a pattern consistent with a wallet-connection lure; no target brand is confirmed from stored content. The captured page title is “connect.spendtym.com”. Current evidence score: 100/100 (critical).

Positive findings are stored from 3 sources: VirusTotal, Spamhaus DBL, and Cloudflare Radar. VirusTotal recorded 13 detections among 95 engines: ADMINUSLabs, alphaMountain.ai, BitDefender, CyRadar, ESET, Forcepoint ThreatSeeker, Fortinet, G-Data, Lionic, SOCRadar, Sophos, VIPRE, Webroot on Jul 10, 2026 at 16:06 UTC. Spamhaus DBL: DBL_SPAM on Jul 14, 2026 at 18:35 UTC. Cloudflare Radar classified the hostname as malicious and assigned the categories phishing and security threats; its verdict timestamp was not retained. Non-positive and contextual checks: ScamAdviser assigned a trust score of 1/100 (Very Likely Unsafe); no observation timestamp was retained. The external blocklist snapshot contained no matches on Aug 7, 2026 at 22:20 UTC. URLQuery recorded no positive detection; no observation timestamp was retained. Google Safe Browsing returned no flag on Mar 2, 2026 at 20:24 UTC. URLScan completed without a malicious verdict (score 0) on Jul 29, 2026 at 02:58 UTC.

HTTP 200 was recorded on Aug 7, 2026 at 22:14 UTC. Registration records for the registrable domain spendtym.com list Name.com, Inc. as the registrar and Jun 12, 2024 as the creation date. At collection time, the hostname resolved to 93.117.131.242 on AS8926 (MOLDTELECOM-AS Moldtelecom SA, MD). The recorded endpoint location is Chisinau, MD. The stored server header is nginx. DOM analysis on Apr 23, 2026 at 15:22 UTC returned 88/100. The evidence archive retains 2 visual captures from PhishDestroy and URLScan.

The content indicators and 3 positive source findings support the current phishing classification. The stored fields do not identify an impersonated brand or victim interaction.