conevrgepay[.]com

The domain conevrgepay.com is identified as a high-risk brand-impersonation phishing site targeting users of financial and payment processing services. Analysis indicates the site is designed to mimic legitimate payment portals, potentially harvesting credentials or facilitating fraudulent transactions. The domain remains active and continues to pose a threat to unsuspecting users. Infrastructure analysis reveals the domain was registered on June 08, 2026, through Internet Domain Service BS Corp., a registrar frequently associated with malicious domains. It resolves to the IP address 158.94.210.56, which has been flagged in multiple threat intelligence feeds. As of the latest scan, 7 of 95 security vendors on VirusTotal have detected this domain as malicious, and it appears on three distinct security blocklists. AlienVault OTX has also recorded the domain in a recent threat intelligence pulse, further corroborating its malicious nature. The site remains operational, with its page title explicitly claiming to be a 'trusted partner,' a common tactic to deceive users into entering sensitive information. Organizations and individuals are advised to block the domain and its associated IP address at the network level. End-users should avoid interacting with the site and report any suspicious communications linking to it. Security teams are recommended to monitor for indicators of compromise, including the domain, IP, and registrar details, and update detection rules accordingly to mitigate potential risks.