connectweb3[.]pro

The domain connectweb3.pro was registered on June 13, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and is currently listed as taken offline. DNS resolution points to IP address 144.31.48.93, which belongs to AS33842 Citytelecom LLC and is geolocated in Russia. The authoritative nameservers are ns3.my-ndns.com and ns4.my-ndns.com. The site is protected by a Let’s Encrypt certificate issued to the identifier YE1, indicating that transport encryption is present but does not mitigate the underlying malicious intent.

Reputation checks show a Gridinsoft trust score of 0 out of 100, and the domain appears on a single security blocklist. PhishDestroy has explicitly blocked the domain, and three of ninety‑one VirusTotal security vendors have flagged it as malicious. The page title returned by HTTP requests is "Loading...", and no further content has been captured, leaving the exact phishing lure unknown.

Observed indicators suggest a generic phishing operation, but the lack of captured landing page details introduces uncertainty about the specific victim targeting or credential‑harvesting mechanisms. Defenders should immediately add connectweb3.pro to URL filtering and endpoint blocklists, enforce network‑level blocking of its resolved IP, and monitor the associated nameservers for any re‑registration or IP changes. Continuous re‑scanning of the domain and its hosting infrastructure is advised to detect potential re‑activation, given the low trust score and existing vendor detections.