www-convergepey[.]com

Analysis shows that www-convergepey.com was registered on 26 January 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED. The domain resolves to 89.23.103.253, an address allocated to AS215540 (Global Connectivity Solutions LLP) in the Netherlands. An SSL certificate identified as R12 is present, indicating a potentially self‑signed or low‑trust certificate. The site’s HTTP response currently returns an offline status, and the page title retrieved during the brief crawl was “Sign”.

The page is classified as a tech‑support scam that impersonates Google, matching the brand target listed in the intelligence. Reputation scoring from Gridinsoft assigns a 0 / 100 trust score, and three independent blocklists (PhishDestroy, MetaMask, SEAL) have already listed the domain. VirusTotal reports three detections out of ninety‑three scanners, confirming that multiple AV engines consider the host malicious. Despite the offline state, the infrastructure details suggest a typical phishing kit deployment: a recently created domain, low‑reputation hosting, and use of a generic SSL certificate.

Uncertainty remains regarding the exact payload or phishing landing page because only the page title “Sign” is known and no further content was captured. Defenders should proactively block the hostname and associated IP address at perimeter firewalls and DNS resolvers, add the domain to internal URL filtering lists, and monitor for any outbound connections to the hosting ASN. Continuous re‑resolution checks are advised in case the site reappears, and any observed traffic should be logged for forensic correlation with the three vendor detections.