VirusTotal
2 / 89
DenunciarInterpretation & limits
Engine detections from this stored analysis. Vendors and collection times may differ from other sources.
“ConnectGate — Linux & Networking for IT”
Assessment based on the stored source evidence below. Review sources →
connect-gate.digital — Não verificado. Tipo de golpe: Impersonation. Resumo das evidências: VirusTotal 2/89 (alphaMountain.ai, Gridinsoft); URLQuery 2 alerts; PhishDestroy score 81/100. Registrador: Dynadot.
A análise detalhada do PhishDestroy AI permanece em inglês para preservar o registro forense original.
These are dated observations, not a live safety check. No flag, a stored capture, or a completed analysis does not establish that a site is safe.
2 / 89
DenunciarEngine detections from this stored analysis. Vendors and collection times may differ from other sources.
2 threat-system alerts
DenunciarAlerts refer to the preserved scan. They do not describe the current state of the site.
3/14
A result applies to the recorded source and observation time. Absence of a flag is not proof of safety.
checked — no match recorded
A result applies to the recorded source and observation time. Absence of a flag is not proof of safety.
23 community references
DenunciarCommunity publication references, not a vendor verdict or evidence of a common operator.
provider verdict: suspicious
A result applies to the recorded source and observation time. Absence of a flag is not proof of safety.
relatório armazenado
Denunciar A preserved page image documents what the collector received; a capture is not a safety verdict.
Análise concluída
DenunciarThis is the recorded automated analysis. Completion alone is not a safety verdict.
Checked; no threat flag recorded
DenunciarA result applies to the recorded source and observation time. Absence of a flag is not proof of safety.
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Hagezi Threat Feed | connect-gate.digital |
malicious | Sinkholed |
| DNS4EU | connect-gate.digital |
malicious | Sinkholed |
Stored narrative · generated . Provider checks below retain their own observation dates.
Analysis of the domain connect-gate.digital indicates it is part of a generic phishing infrastructure observed in early 2026. The domain was registered through Dynadot LLC on March 04, 2026 and resolves to IP address 172.67.191.79, which belongs to AS13335 Cloudflare, Inc., confirming the use of Cloudflare’s reverse‑proxy network. HTTP traffic is served over HTTP/3 and the TLS certificate is issued by Let’s Encrypt (certificate identifier E8), with the domain’s authoritative nameservers listed as aida.ns.cloudflare.com and wells.ns.cloudflare.com. The site’s HTML title reads "ConnectGate — Linux & Networking for IT," suggesting an attempt to appear as a legitimate IT resource, yet no further content analysis is available.
VirusTotal reports that three of ninety‑four scanning engines flagged the domain, reinforcing the malicious classification. The domain appears on three public blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL. Gridinsoft’s trust scoring system assigns a score of 0 out of 100, reflecting a high confidence of abuse.
Current online status is offline, but the infrastructure remains observable via the Cloudflare edge. Defenders should add connect-gate.digital to internal deny lists, monitor DNS queries for the associated Cloudflare IP range, and enforce TLS inspection where feasible to detect any future reactivation. Continuous watch of the registrar’s activity and the associated blocklist entries is recommended to mitigate potential re‑use of the domain in phishing campaigns.
Observações armazenadas comparando o rastreador com o navegador para este host, além de uma verificação em tempo real da assinatura digital para sistemas de distribuição de tráfego do tipo Keitaro.
Nota do digitalizador: timeout: raw=timeout; http=0; via=http_proxy; error=SOCKSHTTPConnectionPool(host='connect-gate.digital', port=80): Read timed out. (read timeout=7)
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
A reputação do Edge-IP não é atribuída a este domínio.
wells.ns.cloudflare.comLocation describes the IP network.
7c91d0ddbba6eeee098d0e71f9522ef02c7dff648d8e5d9a0a19cd279eb492b1Saved certificate metadata. Certificate dates without a timezone are shown as stored. Transport encryption does not establish that the site is trustworthy.
Google PageSpeed Insights — mobile performance audit of connect-gate.digital · checked Mar 4, 2026
11 recorded events. These records describe collected evidence, outgoing notifications and publication; they do not confirm a complete investigation or a takedown.
We scan suspicious URLs, inspect public results and send evidence through the appropriate abuse-reporting channels. The dated events above show what is recorded for this domain. The directory below explains the wider workflow.
Capture the rendered page, requests and visible infrastructure.
Compare the available engine results and retain the analysis timestamp.
Check whether Google currently lists the URL as unsafe.
Inspect a public scan and its recorded network and classification data.
Look for indicator references and related community intelligence.
Compare archived captures and preserve historical context.
Look for matching indicators and associated threat records.
Inspect certificate records and related hostnames.
Compare security resolver responses and record observed blocking.
Inspect the public DNS, TLS, HTTP and technology surface.
Security services used for scanning, reputation checks and reporting are listed below. A service being listed is not evidence that it received, accepted or acted on this particular domain. Recorded submissions appear in the notification history above.
Denunciado por 1 membro da comunidade; visto pela primeira vez em 04/03/2026
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Template-based draft · optional AI wording assistance requires separate consent
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraEnvie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarRelatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMonitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo