conectewalete[.]com

Analysis of the domain conectewalete.com indicates active credential-phishing infrastructure targeting digital-wallet users. Registered on December 9, 2025, through Name.com, Inc., the domain remains operational as of July 24, 2026, resolving to 34.111.179.208, a Google Cloud IP (AS396982) located in the United States. The site returns an HTTP 301 redirect, suggesting it may funnel victims to a secondary malicious endpoint, though the final destination remains unconfirmed. No SSL certificate is present, increasing the risk of interception during credential submission.

Detection coverage is limited but consistent: Google Safe Browsing classifies the domain as social engineering, and PhishDestroy has blocked it. Sixteen of 95 security vendors on VirusTotal flag the domain as malicious, while AlienVault OTX lists it in a single threat intelligence pulse. The domain appears on one additional security blocklist, though the specific list is not disclosed in available data. Nameservers (ns1cny.name.com, ns2ckr.name.com, ns3jkl.name.com, ns4hny.name.com) are hosted under the same registrar, a common pattern in phishing operations to maintain control over DNS records.

Infrastructure analysis reveals the use of Google Cloud and Google Cloud CDN, alongside HTTP/3, which may be leveraged to evade traditional network-based detection. The absence of an SSL certificate is atypical for modern phishing sites but may reflect an attempt to bypass automated scans that prioritize HTTPS traffic. Defenders should treat this domain as high-risk and implement blocking at the DNS or IP level. Further investigation is required to determine the exact wallet brands targeted or the presence of a phishing kit, as no page title or brand-specific indicators are currently available in public threat feeds.